User logout during maintenance mode

Rerolled for Drupal 10.

#14 creates an infinite redirect loop because $this->account->isAuthenticated() is always true now so it always sends a RedirectResponse.
I think MaintenanceModeSubscriber serves no other purpose and could be entirely removed.

Here is a reroll for Drupal 10.2.3.

samit.310@gmail.com → made their first commit to this issue’s fork.

HI,

We have permission provided by Drupal Use the site in maintenance mode(access site in maintenance mode) that allow any user to work on maintenance mode, A simple change can fix this user logout issue,

Here all the users who have Use the site in maintenance mode(access site in maintenance mode) permission, will not logout if the site goes to maintenance mode.

Here is the PR link: https://git.drupalcode.org/project/drupal/-/merge_requests/8876/diffs

Thanks
Samit K.

@samit.310@gmail.com But not logging out does not automatically mean that users should continue to use the website despite maintenance.

Example from practice:
Website is briefly switched to maintenance mode several times a day because automatic backups are performed. However, it is correct that during backups, no user administers the website and therefore should not have the permission “Use the site in maintenance mode”. But the users should not all be logged out just because maintenance mode was switched on briefly. If you have a website with a community where many users are logged in, then they are automatically logged out several times a day.

Only briefly skimmed but any change will need test coverage.

Also issue summary appears incomplete, recommend using default issue template. Sounds like from previous comment MR solution isn't along the idea so definitely needs a summary update.

Hi @handkerchief,

Agree with your point, but here the idea is the only trusted or some specific user roles have this permission Use the site in maintenance mode(access site in maintenance mode).

The functionality will remain the same for other users, meaning whenever the maintenance mode will on all the users except those with the above permission will logout.

Thanks
Samit K.

Rerolling #14 for drupal 10.3.6

Added tests and updated issue summary.

prudloff → changed the visibility of the branch 057267-user-logout-during-fix to hidden.

So believe this would be a feature request vs an actual bug

Not sure if this needs framework or product manager approval first but feedback appears to be addressed.

Did some git archaeology, this was added in #50901: User login under maintenance mode → .

One of the reasons given then was that if you are logged in as a regular auth user, you would not be able to logout to then login again as an admin account. Do we still prevent people from logging out when maintenance mode is on? If so maybe we need to exclude that route.

Also one small comment on the updated test coverage.

I could indeed reproduce this with the patch: logged-in users can't logout (/user/logout returns the maintenance page).
(A workaround is to open a new private browsing window but I see how this is a usability problem.)

I added _maintenance_access to the logout route in order to fix this.