koji

#3394 Renewal expirated sessions
Closed: Fixed by tkopecek. Opened by jcupova.

Closed: Fixed
Reopen Issue

Currently, Koji uses Idle timeout. We should think about absolute and renewal timeout also.
More info:
https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#automatic-session-expiration

Absolute timeout issue 3571

Update: This issue resolve renewal expirated session. Renewal timeout option will be resolved in other issue #3596

@mikem @tkopecek what do you think?

Metadata Update from @jcupova:
- Custom field Size adjusted to None

We definitely need to improve this.

One thing we're going to need to add along with this is automatic session renewal in ClientSession. Clients need to be able to handle this gracefully without a lot of complicated code.

PR 3543

Commit fdfe3082 fixes this issue

Metadata Update from @tkopecek:
- Issue status updated to: Open (was: Closed)

Metadata Update from @jcupova:
- Issue set to the milestone: 1.32

Metadata Update from @jcupova:
- Issue tagged with: testing-ready

Metadata Update from @tkopecek:
- Issue untagged with: discussion

Metadata Update from @mfilip:
- Issue tagged with: testing-done

Commit 0e07429d fixes this issue

Commit 530de712 fixes this issue

Commit f22ff067 fixes this issue

Commit 59f5a4e1 fixes this issue

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/koji/issues/3394

Please continue any further discussion there.
Metadata
None

testing-done testing-ready

None
None
Low
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.