Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When auth tokens expire, open tab appears as if user is still logged in #229

Open
pansapiens opened this issue Dec 15, 2021 · 0 comments
Open
Assignees

Comments

@pansapiens
Copy link
Collaborator

Observed behaviour

If a user opens Laxy, authenticates and then leaves the tab open for a long time, the auth tokens can expire but the app still appears logged in (but attempting various operations, eg remote file browsing, will result in a 401 error dialog).

Expected behaviour

If the users authentication has expired, the UI should clearing indicate this and prompt them to login.
This would probably be implemented as an automatic redirect to the login page when a 401 status code is received for most API calls.

An alternative would be to use the /api/v1/ping endpoint, and include expired authentication status in the response - if ping response shows they have expired auth tokens, redirect to the login page. The disadvantage of this is that users with expired auth would be redirected top /login even on public pages, or ?access_token= URLs.

@pansapiens pansapiens self-assigned this Dec 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant