marius-wieschollek / passwords

A simple, yet feature rich password manager for Nextcloud
GNU Affero General Public License v3.0
201 stars 39 forks source link

[BUG]: Passwrods app keep doing new login sessions #624

Closed ibahnasy closed 6 months ago

ibahnasy commented 6 months ago

⚠️ This issue respects the following points: ⚠️

Server Information

{
    "version": {
        "server": "27.1.5.1",
        "app": "2023.12.31",
        "lsr": false,
        "php": "8.1.2-1ubuntu2.14",
        "cronPhp": "8.1.2-1ubuntu2.14"
    },
    "environment": {
        "os": "Linux",
        "architecture": "x86_64",
        "bits": 64,
        "database": "mysql",
        "cron": "cron",
        "proxy": false,
        "sslProxy": false,
        "subdirectory": false
    },
    "services": {
        "images": "imagick",
        "favicons": "default",
        "previews": "default",
        "security": "hibp",
        "words": "auto",
        "previewApi": false,
        "faviconApi": false
    },
    "status": {
        "autoBackupRestored": false
    },
    "settings": {
        "channel": "stable",
        "nightlies": false,
        "handbook": false,
        "performance": 5
    },
    "encryption": {
        "sse": {
            "SSEv1r1": false,
            "SSEv1r2": true,
            "SSEv2r1": false,
            "SSEv3r1": false,
            "none": true,
            "default": "none"
        },
        "cse": {
            "CSEv1r1": true,
            "none": true,
            "default": "CSEv1r1"
        }
    }
}

Client Information

Browser and Version: Firefox 120 Client OS and Version: Ubuntu 23.10

Bug description

The Passwords app is doing frequent login session without even using it.

    Passwords Session 23.12.23 11:56 - user@IP  2 minutes ago   
    Passwords Session 23.12.23 11:55 - user@IP  3 minutes ago   
    Passwords Session 23.12.23 11:55 - user@IP  3 minutes ago   
    Passwords Session 23.12.23 11:54 - user@IP  4 minutes ago   
    Passwords Session 23.12.23 11:54 - user@IP  5 minutes ago   
    Passwords Session 23.12.23 11:53 - user@IP  5 minutes ago   
    Passwords Session 23.12.23 11:53 - user@IP  6 minutes ago   
    Passwords Session 23.12.23 11:52 - user@IP  6 minutes ago   
    Passwords Session 23.12.23 11:52 - user@IP  7 minutes ago   
    Passwords Session 23.12.23 11:51 - user@IP  7 minutes ago   
    Passwords Session 23.12.23 11:50 - user@IP  8 minutes ago   
    Passwords Session 23.12.23 11:50 - user@IP  8 minutes ago   
    Passwords Session 23.12.23 11:49 - user@IP  9 minutes ago   
    Passwords Session 23.12.23 11:49 - user@IP  10 minutes ago  
    Passwords Session 23.12.23 11:48 - user@IP  10 minutes ago  
    Passwords Session 23.12.23 11:48 - user@IP  11 minutes ago  
    Passwords Session 23.12.23 11:47 - user@IP  11 minutes ago  
    Passwords Session 23.12.23 11:47 - user@IP  12 minutes ago  
    Passwords Session 23.12.23 11:46 - user@IP  12 minutes ago  
    Passwords Session 23.12.23 11:46 - user@IP  13 minutes ago  
    Passwords Session 23.12.23 11:45 - user@IP  13 minutes ago  
    Passwords Session 23.12.23 11:44 - user@IP  14 minutes ago  
    Passwords Session 23.12.23 11:44 - user@IP  14 minutes ago  
    Passwords Session 23.12.23 11:43 - user@IP  15 minutes ago  
    Passwords Session 23.12.23 11:43 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:42 - user@IP  16 minutes ago  
    Passwords Session 23.12.23 11:41 - user@IP  17 minutes ago  
    Passwords Session 23.12.23 11:41 - user@IP  17 minutes ago  
    Passwords Session 23.12.23 11:40 - user@IP  19 minutes ago  
    Passwords Session 23.12.23 11:39 - user@IP  19 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  20 minutes ago  
    Passwords Session 23.12.23 11:38 - user@IP  21 minutes ago  
    Passwords Session 23.12.23 11:37 - user@IP  21 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:36 - user@IP  22 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 11:32 - user@IP  26 minutes ago  
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 23.12.23 09:21 - user@IP  3 hours ago     
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 21:00 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 20:58 - user@IP  15 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 17:41 - user@IP  18 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 16:59 - user@IP  19 hours ago    
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 14:08 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   
    Passwords Session 22.12.23 11:31 - user@IP  a day ago   

Steps to reproduce

Just check: "Devices & Sessions" under: /settings/user/security

Expected behavior

There shouldn't be login sessions for the Passwords app, if not being used at least.

Nextcloud Logs

No response

Browser Logs

No response

marius-wieschollek commented 6 months ago

https://github.com/marius-wieschollek/passwords/issues/621

ibahnasy commented 6 months ago

@marius-wieschollek I'm sorry, why did you close this issue as this it's different than the one you mentioned #621 ?

marius-wieschollek commented 6 months ago

See my comment there. The Dashboard keeps initializing the Passwords widget with every request, creating a session token every time.