Bug 799421

Summary:	Backbone.js auto-refresh defeats session timeout
Product:	[Retired] CloudForms Cloud Engine	Reporter:	Matt Wagner <matt.wagner>
Component:	aeolus-conductor	Assignee:	Angus Thomas <athomas>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Rehana <redakkan>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	1.0.0	CC:	akarol, athomas, deltacloud-maint, hbrock, ssachdev
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-08-30 17:15:40 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Matt Wagner 2012-03-02 16:57:56 UTC

Description of problem:
On pages that use Backbone.js, they will re-query every 30 seconds (or whatever), keeping the sessions alive indefinitely. This renders the 15-minute inactivity timeout ineffective if you happen to leave a tab with auto-refreshes open.


Steps to Reproduce:
1. Log in, navigate to a page with Backbone (like the default pool list page)
2. Leave the page unattended for >15 minutes
3. Click some link


Actual results:
Page loads because your session times out.


Expected results:
Page redirects you to login page because your session has timed out.

Comment 1 Matt Wagner 2012-03-02 20:14:17 UTC

This is caused by https://bugzilla.redhat.com/show_bug.cgi?id=794536 -- which seems to be gaining support for being reverted. I suggest holding off on addressing this bug until the outcome of that one is clear.

Comment 2 Hugh Brock 2012-03-06 14:50:40 UTC

This is fixed by reverting the patch for 794536, as above.

Comment 3 wes hayutin 2012-03-30 18:57:56 UTC

assigning to rehana

Comment 4 Rehana 2012-04-03 12:26:57 UTC

Observed that the browser session didn't get timed out after 15min.

hence moving the status to verified;

verified on ;

rpm -qa | grep aeolus
rubygem-aeolus-image-0.3.0-12.el6.noarch
aeolus-conductor-0.8.7-1.el6.noarch
aeolus-conductor-doc-0.8.7-1.el6.noarch
aeolus-conductor-daemons-0.8.7-1.el6.noarch
aeolus-configure-2.5.2-1.el6.noarch
aeolus-all-0.8.7-1.el6.noarch
rubygem-aeolus-cli-0.3.1-1.el6.noarch