Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-9493

Session expires with delay after CSRF Token manipulation

    XMLWordPrintable

Details

    • Bug Report
    • Status: Closed
    • L3 - Default
    • Resolution: Won't Fix
    • 7.9.6
    • None
    • None
    • None

    Description

      Steps to Reproduce

      • open Tasklist
      • manipulate the CSRF token
      • select a new filter

      Expected Behavior
      session expires --> user will be logged out

      Observed Behavior
      Loading the list of tasks finished with failures. The user is still logged in

      Hint
      With the next post request the user will be logged out.
      A single post request is not enough to perform the logout after a CSRF error.

      Used Environment
      Engine: jboss-7.9.6
      Browser: Firefox
      OS: Linux

      mgm-controller-panel

        This is the controller panel for Smart Panels app

        Attachments

          Issue Links

            is related to

            Bug Report - A problem which impairs or prevents the functions of the product. CAM-9246 Cannot recover from CSRF error without session timeout

            • L3 - Default - Minor issue or issue with existing workaround, feature requests and questions
            • Closed

            Activity

              People

                Unassigned Unassigned
                michael.schoettes Michael Schoettes
                Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Salesforce