Vote #76303
完了Set a back_url when forcing new login after session expiration
0%
説明
Right now, when a session expired (either due to long inactivity or general maximum duration), the user is redirected to /login without a back_url. After login, the user is thus lost and doesn't return to where they were. This is thus a deviation from the normal forced authentication flow.
The attached patch, we extracted from "Planio":https://plan.io/redmine-hosting fixes this by re-purposing the existing means for a proper redirect to @/login@ and thus sets a matching back_url. The patch is made against current trunk at r14180 but should also apply cleanly to all prior versions until at least 2.5.
journals
--------------------------------------------------------------------------------
Duplicates #18980.
--------------------------------------------------------------------------------
Compared to #18980, this patch doesn't duplicate the behavior or @require_login@ and contains working tests.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Patch committed, thanks.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
related_issues
relates,Closed,18980,Parameter back_url not set on redirect to login page when session has expired
Admin Redmine さんが約4年前に更新
- カテゴリ を Accounts / authentication_7 にセット
- 対象バージョン を 2.6.5_95 にセット