[wp-trac] [WordPress Trac] #45296: Serious side-effects when login in another tab after session expiration in first tab

[WordPress Trac]

#45296: Serious side-effects when login in another tab after session expiration in
first tab
--------------------------+------------------------------
 Reporter:  trejder       |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Users         |     Version:
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:  administration
--------------------------+------------------------------
Changes (by SergeyBiryukov):

 * focuses:   => administration
 * component:  General => Users


Old description:

> = A. STEPS TO REPRODUCE:
>
> 1. Start editing a new blog post.
> 2. Open a preview of it in some other browser tab.
> 3. Leave it open and hibernate computer for several hours (or otherwise
> expire the session without refreshing / closing the editor).
> 4. Add a new comment to that blog that requires moderation or otherwise
> cause owner to receive e-mail with a link to a blog.
> 5. Click on received link. New browser tab or window will open. Session
> is expired so login screen appears (correct!).
> 6. Login to WordPress.
> 7. Go back to the other / left open / hibernated browser tabs and try to
> do anything.
>
> In that "old" / other tab you're logged-off / you have session expired
> (even though you have just logged in again), but WordPress isn't able to
> handle this situation gracefully.
>
> = B. SIDE-EFFECTS
>
> == B1. UNABLE TO ADD AN IMAGE
>
> 1. An attempt to add an image causes image browser to display "loading
> knob" infinitely.
>
> == B2. UNABLE TO SAVE THE DRAFT
>
> 1. An attempt to save the draft actually DESTROYS the draft in the
> database.
> 2. Clicking this button causes WordPress to display login screen (even
> though you're already logged in; see below).
> 3. From this moment on your draft preview (the other "old" tab) will be
> constantly showing "Page not found".
> 4. After publishing and unpublishing the page it gets even worse -- only
> "Page not found" page title appears in tab and tab is constantly being
> refreshed endlessly by the browser.
>
> == B3. UNABLE TO LOGIN
>
> 1. An attempt to refresh the page displays login screen (even though
> you're already logged in).
> 2. Logging in is impossible. After login Wordpress displays login page
> again and says that browser has cookies disabled (not true).
> 3. To solve this problem one must restart entire browser (cleaning
> session cookies?) and login again.
>
> = C. Conclusions
>
> Restarting browser solves the B3 and B1 problems only. B2 problem
> partially remains. Wordpress is able to save the draft, but still doing
> this incorrectly and later isn't able to show preview of the post,
> claiming that page is not found or reloading page forever.
>
> To solve last part of B2 problem one must restart browser, re-login and
> save the draft several times.

New description:

 = A. STEPS TO REPRODUCE:

 1. Start editing a new blog post.
 2. Open a preview of it in some other browser tab.
 3. Leave it open and hibernate computer for several hours (or otherwise
 expire the session without refreshing / closing the editor).
 4. Add a new comment to that blog that requires moderation or otherwise
 cause owner to receive e-mail with a link to a blog.
 5. Click on received link. New browser tab or window will open. Session is
 expired so login screen appears (correct!).
 6. Login to WordPress.
 7. Go back to the other / left open / hibernated browser tabs and try to
 do anything.

 In that "old" / other tab you're logged-off / you have session expired
 (even though you have just logged in again), but WordPress isn't able to
 handle this situation gracefully.

 = B. SIDE-EFFECTS

 == B1. UNABLE TO ADD AN IMAGE

 1. An attempt to add an image causes image browser to display "loading
 knob" infinitely.

 == B2. UNABLE TO SAVE THE DRAFT

 1. An attempt to save the draft actually DESTROYS the draft in the
 database.
 2. Clicking this button causes WordPress to display login screen (even
 though you're already logged in; see below).
 3. From this moment on your draft preview (the other "old" tab) will be
 constantly showing "Page not found".
 4. After publishing and unpublishing the page it gets even worse -- only
 "Page not found" page title appears in tab and tab is constantly being
 refreshed endlessly by the browser.

 == B3. UNABLE TO LOGIN

 1. An attempt to refresh the page displays login screen (even though
 you're already logged in).
 2. Logging in is impossible. After login WordPress displays login page
 again and says that browser has cookies disabled (not true).
 3. To solve this problem one must restart entire browser (cleaning session
 cookies?) and login again.

 = C. Conclusions

 Restarting browser solves the B3 and B1 problems only. B2 problem
 partially remains. Wordpress is able to save the draft, but still doing
 this incorrectly and later isn't able to show preview of the post,
 claiming that page is not found or reloading page forever.

 To solve last part of B2 problem one must restart browser, re-login and
 save the draft several times.

--

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/45296#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform