Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-7034

Inactive web management console session not automatically timed-out

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: qpid-java-broker-7.0.0
    • Component/s: Broker-J
    • Labels:
      None

      Description

      If as an operator, I have an session open on the web management console, the session should expire and I should be forced to reauthenticate if I don't use the application for a period of time.

      This currently doesn't happen. Web Management correctly establishes a HTTP session timeout, but the session is kept alive by the regular polls the client side makes to the server. This is sufficient to keep the session alive and means the user is never automatically logged out.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              k-wall Keith Wall
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: