Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0007654Openbravo ERPA. Platformpublic2009-02-18 18:122010-08-17 00:00
shuehner 
shuehner 
lowminorhave not tried
closedduplicate 
5
pi 
 
Core
No
0007654: After session timeout the browser is redirected to the login page but the original servlet is still executed
When the users session times out the following steps are executed:

1.) invalidate (delete) the http session
2.) send redirect (or ajax-error message) to the browser
3.) execute the original servlet with an empty session leading to unpredictable behavior

Step 3.) should not be executed. After step two the browser is sent to the login page and sending more data to the browser does not make sense. Additionally we did already logout the user (invalidate his session) so executing step 3.) cannot work as the is no current user to execute the action with.

Additionally checking the documentation for sendRedirect shows:
After using this method, the response should be considered to be committed and should not be written to.
Go to General Setup -> Application -> Module Management
Wait for the session to time out
Press the 'scan for updates button'
The browser response in the text error
But in the server/eclipse output and stacktrace/error is shown as the scanForUpdates servlet is executed without a valid user
No tags attached.
duplicate of defect 0012362 closed shuehner After a session timeout some http requests are still completely executed after the user is redirected to the login page 
Issue History
2009-02-18 18:12shuehnerNew Issue
2009-02-18 18:12shuehnerAssigned To => shuehner
2009-02-18 18:12shuehnerRegression testing => No
2009-02-18 18:17rafarodaNote Added: 0013687
2009-02-18 18:17rafarodaPrioritynormal => low
2009-02-18 18:17rafarodaSeveritymajor => minor
2009-02-18 18:17rafarodaStatusnew => acknowledged
2010-08-16 21:25shuehnerStatusacknowledged => scheduled
2010-08-16 21:25shuehnerfix_in_branch => pi
2010-08-16 21:26shuehnerRelationship addedduplicate of 0012362
2010-08-16 21:26shuehnerStatusscheduled => closed
2010-08-16 21:26shuehnerResolutionopen => duplicate
2010-08-17 00:00anonymoussf_bug_id0 => 3046641

Notes
(0013687)
rafaroda   
2009-02-18 18:17   
Set to minor since functionality is not broken.