[jira] [Commented] (QPID-7034) Inactive web management console session not automatically timed-out

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/QPID-7034?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16128419#comment-16128419 ] 

ASF subversion and git services commented on QPID-7034:
-------------------------------------------------------

Commit 52b9f9118df1708306f917476af9fb1fcefc8a3c in qpid-broker-j's branch refs/heads/master from [~k-wall]
[ https://git-wip-us.apache.org/repos/asf?p=qpid-broker-j.git;h=52b9f91 ]

QPID-7034: [Java Broker] [Http Management] Implement an absolute timeout, regardless of session activity.

Also prevents the WMC from continually polling the server after an authentication failure has occured (which is a terminal state)


> Inactive web management console session not automatically timed-out
> -------------------------------------------------------------------
>
>                 Key: QPID-7034
>                 URL: https://issues.apache.org/jira/browse/QPID-7034
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>            Reporter: Keith Wall
>             Fix For: qpid-java-broker-7.0.0
>
>
> If as an operator, I have an session open on the web management console, the session should expire and I should be forced to reauthenticate if I don't use the application for a period of time.
> This currently doesn't happen.  Web Management correctly establishes a HTTP session timeout, but the session is kept alive by the regular polls the client side makes to the server.  This is sufficient to keep the session alive and means the user is never automatically logged out.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org