Comment 2 for bug 1724915

Revision history for this message
Bill Erickson (berick) wrote :

Fix pushed:

http://git.evergreen-ils.org/?p=working/Evergreen.git;a=shortlog;h=refs/heads/user/berick/lp1724915-auth-check-noreset

1. Adds the new API flag to optionally avoid extending the auth session time during session retrieval.

2. Adds a new bit of logic to notify all tabs when an auth session has expired, using BroadcastChannel's to communicate across tabs. With this, each tab is immediately closed once any tab sees the auth token has expired, instead of waiting for each tab to close over time as each polls the auth server.

To test

[1] Set a very low value for the library setting auth.staff_timeout, e.g. 30 seconds. (optional).
[2] Log in to 1 tab.
[3] Wait about 10 seconds and log into another tab
[4] Optionally open 10 more tabs.
[5] Wait.
[6] ~35 seconds (or other timeout value) after the last tab is opened, all tabs should redirect to the login page.