Users with no roles are logged out

Created on 26 April 2024, 12 months ago

Problem/Motivation

I check "Role Timeout" and I want to prevent user with no specific role (i.e., having only the authenticated role) to be logged out. This isn't possible, they are logged after the generic timeout (timeout) is consumed.

The reason is obvious, the authenticated is not exposed in the table with roles from settings form, this you cannot assign a "0" value to its timeout. Being missing from the table acts as an unchecked role to which this rule applies: Any role not ticked will use the default timeout value and default redirect URL (this is description from settings form)

Steps to reproduce

* Check "Role Timeout"
* Login as a user having only the authenticated role.
* Wait for timeout + timeout padding to pass

The user will be logged off and there's no way to set not to be auto-logged out

Proposed resolution

Allow authenticated role to be configured

Remaining tasks

None.

User interface changes

The authenticated role can be configured in the settings form.

API changes

None

Data model changes

None.

πŸ› Bug report
Status

Active

Version

1.0

Component

Code

Created by

πŸ‡·πŸ‡΄Romania claudiu.cristea Arad πŸ‡·πŸ‡΄

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024