Auth/session cookie problem results in unwanted redirect on search

[Shawn Boyette]

In versions of Evergreen through 1.6.0.0, an OPAC search will sometimes result in the user being redirected to the OPAC(?) main page after results begin to display. The workaround is to delete session cookies.

This came out of #486087, which has been closed and marked as a duplicate of this bug.

[Dan Scott (denials)]

Does this problem occur when the session for an authtoken associated with the "ses" session cookie has timed out, but the browser believes that the session is still active? The cookie now gets deleted automatically when the browser is closed, but some people leave their browsers running for days on end.

I was poking around /openils/var/web/opac/common/js/opac_utils.js and this seems like the likely location of the problem, but I hope to be able to reproduce the problem efficiently so that debugging can be a bit more efficient. If anyone has more information, that would be helpful.

[James Fournie (jfournie)]

I just got this when doing some apache restarty things on a dev server. It happened in Chrome on Mac. I checked the ses cookie and then ran request open-ils.auth open-ils.auth.session.retrieve on it and it said there was no session.

I can't really recreate it but it has happened a few times and seems to happen when I am doing things which require a combination of logging in and out of EG web interfaces and restarting or reloading apache.

~J

[Jason Stephenson (jstephenson)]

Given the age of the bug and that JSPAC is soon to be deprecated, I've setting to Won't Fix.