New session at refresh

[smbpunt]

Hi,

Thank you for your bundle.

I've notice a misbehaviour while using your bundle : At each refresh/new page, I have a new session.

I'd appreciate if you could check if you have the same behaviour in your applications :
You can check with Developer Tools if the cookie stay the same or check when the session was created : $this->get('session')->getMetadataBag()->getCreated();

I don't have a fix, I've tried to locate the problem but without success...

(I've tried to create a new project with a basic authentification and no problems, then I tried to create a new project with only your bundle and the problem is there)

Thank you !

[arnucci]

Hello

I found this link on the documentation : https://symfony.com/doc/3.4/security/guard_authentication.html#avoid-authenticating-the-browser-on-every-request

To sum up, it describe a workaround to avoid the usage of this authenticator on every request once you are login.

@Alexandre-T : The question is : Is it the role of this bundle to manage this use case ?

Thanks for your interest on this "weird" behaviour. And thanks for your bundle
Arnaud

[Alexandre-T]

Sorry, I don't received notification about this issue.

In my applications, users authenticate and can do a lot of critical actions. If I don't check PHPCas on each request, users won't be logout as soon as administrator remove them from our active directory (which is connected to our CAS Server)

@arnucci : So, I guess the answer is "yes" and "no".

I will check this as soon as possible, I think that a good solution could be a specific parameter in the settings of the yaml file.

• If "on", application will check at each request (actual situation),
• If "off", application won't check at each request but at login. So the only update should be in the CasAuthenticator::supports and in its constructor to catch the settings.

@Punt13140 Thank you for the tips $this->get('session')->getMetadataBag()->getCreated(); I will try to use it in tests.

I'll do it as soon as possible, but I'm really busy actually.