tracker issue : CF-4051769

select a category, or use search below
(searches all categories and all time range)
Title:

CFLOGIN idletimeout under cookie storage does not work

| View in Tracker

Status/Resolution/Reason: Closed/Withdrawn/CannotReproduce

Reporter/Name(from Bugbase): Barry Moore / Barry Moore (Barry Moore)

Created: 09/08/2015

Components: Security

Versions: 11.0

Failure Type: Non Functioning

Found In Build/Fixed In Build: CF11_Final /

Priority/Frequency: Critical / All users will encounter

Locale/System: English / Windows 8.1/64bit

Vote Count: 0

Problem Description: Changing the value of the idletimeout attribute of the cflogin tag has no effect using cookie storage.

Steps to Reproduce:

Actual Result:

Expected Result:

Any Workarounds:

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	4051769

External Customer Info:
External Company:  
External Customer Name: Barry Moore
External Customer Email:  
External Test Config: My Hardware and Environment details:

Attachments:

Comments:

Hi Barry Moore, I tried to repro the issue, for different values of idletimeout when loginstorage="cookie" 1)when the idletimeout < session timeout ... logs out the user after the idletimeout 2)when the idletimeout > session timeout ... in this case too even if session time is out, the user is logged out only after idletimeout expires. The "IsUserLoggedIn()" function returns "no". And this the behaviour on CF11 GM build as well as update 6. Please do share the code that you have been using, so that if I am missing something in reproducing this, I can get that right. Thanks!
Comment by S P.
5943 | September 15, 2015 11:15:01 PM GMT
I have done some more testing since I entered the bug report. The web application uses HTML and Flash (Flex) remoting on a shared host server. This application ran flawlessly on CF9. The Flex application data consumption using RemoteObject and the cfc does not appear to register in the CFLOGIN algorithm ie. update as activity against the idletimeout. The fault string returned is "coldfusion.runtime.AbortException"
Comment by External U.
5944 | September 16, 2015 04:54:25 PM GMT
Can you please share the sample code snippet for reproducing the issue and also the exception stack trace. Thanks!
Comment by S P.
5945 | September 28, 2015 11:31:33 PM GMT
Since we have not got a response, we will be closing the bug for now. If you still face the issue or have any concerns, the bug would be reopened. Thanks!
Comment by S P.
5946 | October 12, 2015 05:13:34 AM GMT