Grouper Developers Forum

[Chris Hyzer <>]

The problem here is users let the java session timeout, then the next click 
on the new UI will result in a CSRF error and ask them to start over.

This is fixed, if someone patches and tries it out, let me know the result :)

https://bugs.internet2.edu/jira/browse/GRP-1015

https://github.com/Internet2/grouper/commit/6f1177388d304dd3bdb3dc46d2faea5e41dec76c

Thanks,
Chris

-----Original Message-----
From: David Langenberg (JIRA) 
[mailto:]
 
Sent: Sunday, August 03, 2014 10:35 PM
To: Chris Hyzer
Subject: [JIRA] (GRP-1015) New UI has poor timeout handling


    [ 
https://bugs.internet2.edu/jira/browse/GRP-1015?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=19659#comment-19659
 ] 

David Langenberg commented on GRP-1015:
---------------------------------------

My suggestion is to look at the request itself.  If it's a GET, then just 
make the browser re-do the GET.  POST is a bit trickier.  In this particular 
case, the issue was a GET request causing the error which just seems wrong.

> New UI has poor timeout handling
> --------------------------------
>
>                 Key: GRP-1015
>                 URL: https://bugs.internet2.edu/jira/browse/GRP-1015
>             Project: Grouper
>          Issue Type: Bug
>          Components: UI
>    Affects Versions: 2.2.0
>            Reporter: David Langenberg
>            Assignee: Chris Hyzer
>
> When your session on the new 2.2 UI times out, you wind up landing at an 
> error screen asking you to restart your session.  It would be better if the 
> app instead was smart enough to just cause your browser to do the re-load, 
> thus sparing the user from seeing the error.



--
This message was sent by Atlassian JIRA
(v6.2#6252)