Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0007654
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformminorhave not tried2009-02-18 18:122010-08-17 00:00
ReportershuehnerView Statuspublic 
Assigned Toshuehner 
PrioritylowResolutionduplicateFixed in Version
StatusclosedFix in branchpiFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionpiSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0007654: After session timeout the browser is redirected to the login page but the original servlet is still executed

DescriptionWhen the users session times out the following steps are executed:

1.) invalidate (delete) the http session
2.) send redirect (or ajax-error message) to the browser
3.) execute the original servlet with an empty session leading to unpredictable behavior

Step 3.) should not be executed. After step two the browser is sent to the login page and sending more data to the browser does not make sense. Additionally we did already logout the user (invalidate his session) so executing step 3.) cannot work as the is no current user to execute the action with.

Additionally checking the documentation for sendRedirect shows:
After using this method, the response should be considered to be committed and should not be written to.
Steps To ReproduceGo to General Setup -> Application -> Module Management
Wait for the session to time out
Press the 'scan for updates button'
The browser response in the text error
But in the server/eclipse output and stacktrace/error is shown as the scanForUpdates servlet is executed without a valid user
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]
duplicate of defect 0012362 closedshuehner After a session timeout some http requests are still completely executed after the user is redirected to the login page 

-  Notes
(0013687)
rafaroda (developer)
2009-02-18 18:17

Set to minor since functionality is not broken.

- Issue History
Date Modified Username Field Change
2009-02-18 18:12 shuehner New Issue
2009-02-18 18:12 shuehner Assigned To => shuehner
2009-02-18 18:12 shuehner Regression testing => No
2009-02-18 18:17 rafaroda Note Added: 0013687
2009-02-18 18:17 rafaroda Priority normal => low
2009-02-18 18:17 rafaroda Severity major => minor
2009-02-18 18:17 rafaroda Status new => acknowledged
2010-08-16 21:25 shuehner Status acknowledged => scheduled
2010-08-16 21:25 shuehner fix_in_branch => pi
2010-08-16 21:26 shuehner Relationship added duplicate of 0012362
2010-08-16 21:26 shuehner Status scheduled => closed
2010-08-16 21:26 shuehner Resolution open => duplicate
2010-08-17 00:00 anonymous sf_bug_id 0 => 3046641


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker