You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Lorenz Quack (JIRA)" <ji...@apache.org> on 2017/11/08 11:04:00 UTC

[jira] [Created] (QPID-8022) [Broker-J, WMC] When the session ends (timeout, broker goes away, connection lost) the UI should cearly indicate this

Lorenz Quack created QPID-8022:
----------------------------------

             Summary: [Broker-J, WMC] When the session ends (timeout, broker goes away, connection lost) the UI should cearly indicate this
                 Key: QPID-8022
                 URL: https://issues.apache.org/jira/browse/QPID-8022
             Project: Qpid
          Issue Type: Bug
          Components: Java Broker
            Reporter: Lorenz Quack


Currently when the http session ends (for example when the configured {{qpid.port.http.absoluteSessionTimeout}} expires) the Web Management Console (WMC) displays a  dialogue box (with a generic 401 error in this case) offering a button to log in again.
However, the dialogue box is closable. If the user closes it the WMC remains somewhat usable. All client-side operations continue to work (e.g., create a Query). Some operations fail silently (e.g., retrieving data when opening a new tab by double clicking on, for example, a Port) and yet other operations redisplay the 401 dialogue (e.g., broker-side operations involving POST or PUT).

I think when the user is no longer logged in the WMC should clearly indicate this by  somehow preventing all further use of the WMC. From a security point of view we also want the existing data currently being displayed to disappear.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org