[Mono-bugs] [Bug 416076] New: Session timeout is taken absolute from the start instead of idle time

[bugzilla_noreply at novell.com]

https://bugzilla.novell.com/show_bug.cgi?id=416076


           Summary: Session timeout is taken absolute from the start instead
                    of idle time
           Product: Mono: Class Libraries
           Version: unspecified
          Platform: Other
        OS/Version: Ubuntu
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Sys.Web
        AssignedTo: mhabersack at novell.com
        ReportedBy: adriaanvk at gmail.com
         QAContact: mono-bugs at lists.ximian.com
          Found By: DeveloperNet


Created an attachment (id=232562)
 --> (https://bugzilla.novell.com/attachment.cgi?id=232562)
testcase

In mono 1.9.1 the session timeout is taken from the start. So, when session
timeout is set to default 20 minutes, after 20 minutes from the start the
session is killed, no matter if the user is still using the application.

Session timeout should be seen as idle timeout. When there is no request done
during 20 minutes, the session is timed out. This is also how it was working in
1.2.6 and on iis.

This bug is hard for our applications, because our users uses the application
for e.g. the whole day, so setting the timeout to 20 minutes cause them to
logon every 20 minutes, independent if they are still in the application
itself!

testcase:
- start xsp in the testweb folder in attached archive
- run /index.aspx?start=1 - session created
- run /index.aspx and refresh this page each 10 seconds
- after a minute the session is expired, but should not, because we have not
been idle for a minute.


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.