Red Hat Bugzilla – Bug 799421
Backbone.js auto-refresh defeats session timeout
Last modified: 2014-08-17 18:27:30 EDT
Description of problem:
On pages that use Backbone.js, they will re-query every 30 seconds (or whatever), keeping the sessions alive indefinitely. This renders the 15-minute inactivity timeout ineffective if you happen to leave a tab with auto-refreshes open.
Steps to Reproduce:
1. Log in, navigate to a page with Backbone (like the default pool list page)
2. Leave the page unattended for >15 minutes
3. Click some link
Page loads because your session times out.
Page redirects you to login page because your session has timed out.
This is caused by https://bugzilla.redhat.com/show_bug.cgi?id=794536 -- which seems to be gaining support for being reverted. I suggest holding off on addressing this bug until the outcome of that one is clear.
This is fixed by reverting the patch for 794536, as above.
assigning to rehana
Observed that the browser session didn't get timed out after 15min.
hence moving the status to verified;
verified on ;
rpm -qa | grep aeolus