search

geonetwork / core-geonetwork

GeoNetwork is a catalog application to manage spatially referenced resources. It provides powerful metadata editing and search functions as well as an interactive web map viewer. It is currently used in numerous Spatial Data Infrastructure initiatives across the world.
http://geonetwork-opensource.org/
GNU General Public License v2.0
423 stars 489 forks source link

Logout doesn't work when on Settings page #4739

Open chiarachiarelli opened 4 years ago

chiarachiarelli commented 4 years ago

Describe the bug When going to the administration console menu it is not possible to log out anymore.

To Reproduce Steps to reproduce the behavior:

  1. Log in GeoNetwork as a specific user (admin or whatever user is fine)
  2. Go to Admin Console Settings page
  3. Click on "Logout button" from the top right corner of the page

Instead than logging out, the application goes to the home page, but still logged in! The only possibilities to logout are either to wait the timeout of the session or to copy the logout link without the redirection parameter and executing it directly.

Once you have gone through the Admin Console menu, it is not possible to log out anymore, even if you go to other pages.

Desktop (please complete the following information):

pvgenuchten commented 4 years ago

I have not been able to reproduce this exact behaviour on docker. But I noticed something related. If I login, close the browser and return the page, i'm still logged in. Can it be related to the apache/tomcat configuration @juanluisrp?

juanluisrp commented 4 years ago

Following your steps I can reproduce the error (using official GeoNetwork 3.10.2 Docker image). See video. I don't think it is related with caching because the call to the service /geonetwork/srv/api/me used to know if the user is logged in or not includes a random param to avoid the caching problem (i.e. /geonetwork/srv/api/me?_random=466)