influxdata / influxdata/influxdb

session-renew-disabled option diesn't work

Open
#23,686 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

__Steps to reproduce:__
List the minimal actions needed to reproduce the behavior.

1. session-renew-disabled = false
2. Log in to influxdb
3. Open dashboard, enable auto refresh (every 60s)
4. User will be logged out in 1h

__Expected behavior:__
User is logged in after 1h because he issues requests every 60s and his session should be auto revewed

__Actual behavior:__
User is logged out after 1h

__Environment info:__

* System info: Linux 4.18.0-338.el8.x86_64 x86_64
* InfluxDB version: InfluxDB v2.4.0 (git: de247bab08) build_date: 2022-08-18T19:41:15Z (it used to work in 2.0.8 (the only version I checked))

__Config:__
```
bolt-path = "/var/lib/influxdb/influxd.bolt"
engine-path = "/var/lib/influxdb/engine"
metrics-disabled = true
pprof-disabled = true
```

Contributor guide

Open the contributing guide

Research direction

Reproduce the issue by logging in, enabling dashboard auto-refresh every 60 seconds, and waiting past the one-hour session limit with session-renew-disabled=false. Trace the session renewal behavior from login and auto-refresh requests; done means the session remains active beyond one hour under these conditions and the reported logout no longer occurs.

Written by the indexing model from the issue text.

Assessment

Domain
authentication
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.