If logout from backend the 'client_id' is still 1
If logout from frontend the 'client_id' is still 0
In all cases the 'client_id' is lost and it's set to NULL as in the case that 'shared session' is enabled
Joomla 4
Labels |
Added:
?
|
Category | ⇒ | Authentication |
Status | New | ⇒ | Information Required |
Status | Information Required | ⇒ | Discussion |
confirmed
Status | Discussion | ⇒ | Confirmed |
Labels |
Added:
J4 Issue
|
Additionally, testing the latest Joomla 4 Alpha 4 i noticed that by default every session is started having the 'client_id' set to NULL until a user login to the frontend or backend application.
Basically a 'client_id' is no more assigned until a user perform the login to either the frontend or backend.
So now that 3.8.6 is merged up, between the changes created with the MetadataManager
class' introduction and the architecture changes in 4.0 in general, the metadata manager is never actually triggered on a fresh session's creation (only the hook in the user plugin to refresh this data is fired).
Here's what needs to happen:
MetadataManager
class converted to a service to be used throughout the app stack as neededMetadataManager
class refactored to account for 4.0 architecture changes
createRecordIfNonExisting()
can't really work as isMetadataManager
should be made aware of the new config which disables the metadata tracking altogetherMetadataManager
triggered by a SessionEvents::START
event listener (TODO - check if there's a code path in the CMS where sessions are restarted, inherently triggering SessionEvents::RESTART
, and ensure that is hooked too)
WebApplication::afterSessionStart()
method which also serves as a listener for the start event to ensure that the internal session registry and user object are setAlso to consider is if we're now willing to accept the metadata being stored to a separate table or if we're going to continue mixing the session table with both core session data and the extra metadata.
Also to consider is if we're now willing to accept the metadata being stored to a separate table or if we're going to continue mixing the session table with both core session data and the extra metadata.
Why wouldn't we?
Why wouldn't we?
We're a stubborn crew that's set in our ways?
@joeforjoomla is this still an issue?
Labels |
Added:
Information Required
|
Status | Confirmed | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-03-12 15:33:00 |
Closed_By | ⇒ | joeforjoomla |
@joeforjoomla is this still an issue?
No longer an issue. Closed.
@mbabker should this be applied to a Project?
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/17405.