Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

session.state.timeout never work as described in the comment. #1982

Open
Kojiro-Goto opened this issue Mar 1, 2024 · 0 comments
Open

session.state.timeout never work as described in the comment. #1982

Kojiro-Goto opened this issue Mar 1, 2024 · 0 comments

Comments

@Kojiro-Goto
Copy link

Kojiro-Goto commented Mar 1, 2024

When session.state.timeout time passed after accessing IdP login page, you can't process
authentication and IdP(SSP) sends redirect response and show login page again.
My understanding for this parameter is above.

Latest version of SSP doesn't perform as above so this means that session.state.timeout has no meaning.
This change comes from commit: 3c52b28

Questions:

  1. Is this latest SSP design?
  2. Is this an issue?

How to reproduce:

  1. set 60 for session.state.duration
    'session.state.timeout' => 60

  2. Using ldap:LDAP module for authentication

  3. Access to the IdP. (IdP Shows login page)

  4. Wait 60 seconds.

  5. Input any id and any password

Old version (before commit: 3c52b28) works fine. (Redirect same URL)
Latest version (after commit: 3c52b28) perform authentication process.

Thanks,

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant