Session Loss When Clicking "Manage Resources" in an IPT Instance

[ymatheus95]

Problem Description:

I am encountering a specific issue with one of the three instances of IPT operating in my environment, each running in separate Docker containers. I use a Docker Compose file to manage these instances. The problem at hand occurs only in one of the instances, where the Admin user loses their session upon clicking on "Manage Resources."

Step-by-step description of the problem:

The Admin user logs in successfully. The Admin user can perform any administrative task without issues. However, upon clicking "Manage Resources," the page is redirected to https://example/instance1/manage/?. The session is not abruptly terminated, but when the user clicks on any other function or link, they are redirected to the login page. Additional Information:

IPT Version in use: 2.7.6 This problem is adversely affecting user experience and system functionality, and I am seeking assistance in resolving this specific issue in one of the IPT instances.

This is recorded at the moment when the session is terminated:

[mike-podolskiy90]

Thank you for contacting us and for the detailed description of the problem. It is very strange that the problem occurs only in one IPT. I'll look into what could be causing this problem and get back to you.

[mike-podolskiy90]

Does this happen for every admin user every time you try?

[mike-podolskiy90]

@ymatheus95 One of the possible issues is a session timeout. Please check it out in your IPT data directory (config -> ipt.properties -> session.timeout). It's set in minutes, so please make sure you have a reasonable value there, e.g. 60

[edalcin]

This happened on my test server this week. I recreated docker from scratch and the problem disappeared.

[edalcin]

The problem happening:

https://youtu.be/kyfJ7F-vzcE?si=a6rFkiO5Zy8uGKQb

[ymatheus95]

Isso acontece com todos os usuários administradores sempre que você tenta?

Yes, this issue affects all users. We have reset the passwords, but the problem still persists.

[ymatheus95]

Isso aconteceu no meu servidor de teste esta semana. Recriei o docker do zero e o problema desapareceu.

Good morning, yes, I rebuilt the instance, but the issue persists.

pt-br: Bom dia, sim, reconstruí a instância, mas o problema continua.

[ymatheus95]

I just clicked closed by mistake.

[ymatheus95]

@ymatheus95 One of the possible issues is a session timeout. Please check it out in your IPT data directory (config -> ipt.properties -> session.timeout). It's set in minutes, so please make sure you have a reasonable value there, e.g. 60

I believe it's not a timeout issue, as the problem doesn't occur when using other administrative functions, only when clicking 'Manage Resources.' In advance, thank you for your response.

[mike-podolskiy90]

@ymatheus95 Would it be possible to create an admin account for me?

[ymatheus95]

@ymatheus95 Would it be possible to create an admin account for me?

Certainly, I will reach out to my client and request permission. Would it be possible for us to schedule a Teams call?

[mike-podolskiy90]

Yes, of course. But I suspect it would be pretty difficult to find the reason without debugging the IPT

[edalcin]

@ymatheus95 Would it be possible to create an admin account for me?

@mike-podolskiy90 , email me at edalcin@jbrj.gov.br. I work together with @ymatheus95, and I'll open your account and send details by email.

[mike-podolskiy90]

@edalcin Thank you for the account.

@ymatheus95 After some debugging I found the reason of the issue. It's this resource: https://ipt.jbrj.gov.br/jabot/manage/resource?r=ufrn This resource has a logo that refers to another IPT: https://ipt.jbrj.gov.br/reflora/logo.do?r=ufrn_herbarium and this call triggers session change in the browser. I removed the logo from the resource in the Additional metadata section and the manage section is working fine now. Please don't add URLs to other IPTs, upload logo file instead. You also need to republish this resource, otherwise problems will persist if the resource's home page is open.

Let me know if you have questions

[edalcin]

Dear Mike,

Thank you very much for this. I'll try next days.

However, this explanation does not explain why in my private IPT test the same problem happened for a while: https://ipt.dalc.in/ . May be cache stuff...

Thanks!

Eduardo

[ymatheus95]

@edalcin Thank you for the account.

@ymatheus95 After some debugging I found the reason of the issue. It's this resource: https://ipt.jbrj.gov.br/jabot/manage/resource?r=ufrn This resource has a logo that refers to another IPT: https://ipt.jbrj.gov.br/reflora/logo.do?r=ufrn_herbarium and this call triggers session change in the browser. I removed the logo from the resource in the Additional metadata section and the manage section is working fine now. Please don't add URLs to other IPTs, upload logo file instead. You also need to republish this resource, otherwise problems will persist if the resource's home page is open.

Let me know if you have questions

@edalcin Thank you for the account.

@ymatheus95 After some debugging I found the reason of the issue. It's this resource: https://ipt.jbrj.gov.br/jabot/manage/resource?r=ufrn This resource has a logo that refers to another IPT: https://ipt.jbrj.gov.br/reflora/logo.do?r=ufrn_herbarium and this call triggers session change in the browser. I removed the logo from the resource in the Additional metadata section and the manage section is working fine now. Please don't add URLs to other IPTs, upload logo file instead. You also need to republish this resource, otherwise problems will persist if the resource's home page is open.

Let me know if you have questions

Incredible!! I'm very grateful for the help.