Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing refresh after LogOut in 5.27.0 #4078

Open
AA-45 opened this issue Oct 16, 2023 · 2 comments
Open

Missing refresh after LogOut in 5.27.0 #4078

AA-45 opened this issue Oct 16, 2023 · 2 comments

Comments

@AA-45
Copy link

AA-45 commented Oct 16, 2023

Environment

  • verdaccio version: 5.27.0
  • node version [18.13.0]
  • package manager: [npm@9.2.0]
  • os: [linux Debian 12.1]

Describe the bug
Missing refresh after LogOut in 5.27.0 via webUI
This cause that a newly logged out user can read package information uploaded to the registry.
For sure It is more of a formal error than a dangerous error.

To Reproduce
Install verdaccio latest on a server and login via web interface;
now click on your profile and then click "LogOut"
you will clearly see that available package in server registry are still rendered in the web page;
If u manually refresh with CTRL+R then all packages info disappear.

Expected behavior
A simple auto-refresh trigger after log-out action should be enough.

It's a little bug for sure easy to fix.
Thank u to all contributors for your work at this awesome project!

@juanpicado
Copy link
Member

Have you tried previous versions of happens also?

@AA-45
Copy link
Author

AA-45 commented Oct 17, 2023

Not yet,
If u want I can try to reproduce it in a specific release that u specify me

However I'm almost sure that there was this problem in the previous release too, but only tests will tell us for sure

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants