Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(kv): don't set session expiration time to earlier than existing expiration on renew session #17751

Merged
merged 3 commits into from
Apr 15, 2020

Conversation

GeorgeMac
Copy link
Contributor

@GeorgeMac GeorgeMac commented Apr 15, 2020

Closes #17750

This change ensures the current expiration time on a session is respected and retained until a new expiration time is presented which extends the life of the session.
Until this change, a session could be shortened via RenewSession.
This was happening frequently within the http.AuthenticationMiddleware. Rendering all sessions around 5 minutes long.

  • CHANGELOG.md updated with a link to the PR (not the Issue)
  • Well-formatted commit messages
  • Rebased/mergeable
  • Tests pass
  • http/swagger.yml updated (if modified Go structs or API)
  • Documentation updated or issue created (provide link to issue/pr)
  • Signed CLA (if not already signed)

@GeorgeMac GeorgeMac requested review from a team and gavincabbage and removed request for a team April 15, 2020 11:41
@GeorgeMac GeorgeMac changed the title Gm/session renewal fix(kv): don't set session expiration time to earlier than existing expiration on renew session Apr 15, 2020
Copy link
Contributor

@gianarb gianarb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why nobody complained about it surprises me

@GeorgeMac GeorgeMac merged commit 00eb982 into master Apr 15, 2020
@GeorgeMac GeorgeMac deleted the gm/session-renewal branch April 15, 2020 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

RenewSession should acknowledge existing expiration time (and it promotes race conditions)
2 participants