[Mono-bugs] [Bug 63558][Wis] Changed - FormsAuthenticationTicket expiration

bugzilla-daemon@bugzilla.ximian.com bugzilla-daemon@bugzilla.ximian.com
Mon, 23 Aug 2004 12:01:47 -0400 (EDT)


Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by jpease@twcny.rr.com.

http://bugzilla.ximian.com/show_bug.cgi?id=63558

--- shadow/63558	2004-08-23 11:52:08.000000000 -0400
+++ shadow/63558.tmp.18268	2004-08-23 12:01:47.000000000 -0400
@@ -1,13 +1,13 @@
 Bug#: 63558
 Product: Mono: Class Libraries
 Version: unspecified
 OS: unknown
 OS Details: 
-Status: RESOLVED   
-Resolution: FIXED
+Status: REOPENED   
+Resolution: 
 Severity: Unknown
 Priority: Wishlist
 Component: Sys.Web
 AssignedTo: gonzalo@ximian.com                            
 ReportedBy: jpease@twcny.rr.com               
 QAContact: mono-bugs@ximian.com
@@ -80,6 +80,25 @@
 
 
 ------- Additional Comments From jpease@twcny.rr.com  2004-08-23 11:52 -------
 Created an attachment (id=9346)
 Proposed patch for RenewTicketIfOld
 
+
+------- Additional Comments From jpease@twcny.rr.com  2004-08-23 12:01 -------
+The first patch resolves a bug resulting in inconsistent expiration
+times for renewed authentication tickets.  Currently in the CVS, the
+expiration time for a renewed ticket varies depending on the distance
+within the timeout interval.  Using the MS Framework, a renewed ticket
+has an expiration time of the current time plus the timeout value
+(expiration - issuedate).
+
+Without the patch, for example, authentication at 11:00.00 with a
+timeout of 2 minutes results in an IssueDate of 11:00.00 and an
+expiration of 11:02.00.  A refresh at 11:01.05 results in a new
+expiration of 11:01.15, just ten seconds later.
+
+With the patch, the same circumstances result in a new expiration time
+of 11:03.05, exactly 2 minutes (the value of timeout) later.
+
+Please look into this.  I have reattached the patch using diff -u as
+requested.