Skip to content

Missing next parameter after session timeout logout #22440

Closed

Description

Kibana version: 6.3.1

**Elasticsearch version:**6.3.1

Server OS version: Amazon Linux 2 AMI

Browser version: Chrome Version 68.0.3440.106 (Official Build) (64-bit)

Browser OS version: MacOS Sierra 10.13.4

Original install method (e.g. download page, yum, from source, etc.): yum

Describe the bug: We observed behaviour when user opens existing visualisation and left it open until his session time outs. User gets redirected to login page when he log in again is not redirected to visualisation he had opened before session time outs. This differ form behaviour on other sections like Dashboards or Monitoring etc.

Steps to reproduce:

  1. Set xpack.security.sessionTimeout to some short time like 20 second
  2. Restart kibana to get this in effect
  3. Login to kibana
  4. Open some visualisation.
  5. wait util your session ends and you got logged out
  6. Malformed login url is present in address bar like this one https://localhost:5601/login?next=%2F#?_g=()please note that next parameter does not contain actual next page.
  7. Log in again
  8. You end up on Kibana Home page instead of last opened visualisation.

Expected behavior: We expect that user would be redirected to Visualization he had opened before he got logged out due to session timeout.

Screenshots (if relevant):

Errors in browser console (if relevant): NA

Provide logs and/or server output (if relevant): NA

Any additional context: If user open visualisation and hits save button it works correctly and when is session ends and he log in again he is redirected correctly to visualisation he had open before session ends.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    Team:SecurityTeam focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!bugFixes for quality problems that affect the customer experience

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions