pgadmin-org / pgadmin-org/pgadmin4
Issue with sessions in pgAdmin4
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 3.8k
- Forks
- 891
- Avg merge
- 4d 7h
- Merged PRs (30d)
- 8
Description
Please note that security bugs or issues should be reported to security@pgadmin.org.
Describe the bug
An issue with pgAdmin4 sessions
To Reproduce
Steps to reproduce the behavior:
- Install pgAdmin 4 (v6.21) using wheel package (considering all fresh pgAdmin setup)
- Create a user (test@test.com) and login
- Add new Servers (using import/export servers) and connect with the server
- Keep open the browser windows with the test@test.com user logged in
- Now uninstall pgAdmin and remove the DB file as well
- Now Install pgAdmin 4 v7.0
- Create a user (sample@test.com) and log in
- Add new Servers (using import/export servers)
- check the server which was connected with V6.21 is showing as connected even though we have not connected it with the latest installation.
Expected behavior
It should not use the older session with the new login
(Note: use fs_uniquifier from the User model to create a new session)
Desktop (please complete the following information):
- OS: OSX Ventura
- Version: Candidate build V7.0
- Mode: Server
- Browser (if running in server mode): chrome
- Package type: Python
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the User model and the session handling used by the Python package, using the reported fs_uniquifier note as the entry point. Reproduce the uninstall, database removal, reinstall, and new-login sequence described in the issue. Done means a session from the previous installation is not reused after the new user logs in.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- postgresql, python
- Domain
- authentication, backend, databases
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100