5.1.1|After Application session time still able to see logout button and accout profile link

[Former Member]

Hi team,

In default hybirs application "yacceleratorstorefront" after expiring the server session timeout that is default 30 sec (defined in web.xml), I am able to see the logout button on top. a

[Former Member · Accepted solution]

are you sure it's 30 seconds and not 30 minutes.

[former_member634807 · Accepted solution]

how to fix this issue?

[Former Member]

This happens coz of autologin feature. When session dies. Autologin filter creates new session according to rememberMe cookie. RequireHardLoginBeforeControllerHandler looks for acceleratorSecureGUID in session, but session is newly created and it has no this attribute.

UPDATED: This is normal functionality of "soft login" feature.

[Former Member]

Right... so to get rid of the soft login functionality, which is all spring configured and documented and standard; instead of just reconfiguring the Spring security config you've done some weird hack?

[Former Member]

Agreed, this is fully "soft login" feature. I have confused it with full remember me auto login. Thanks.

[Former Member]

Hi Ivan, I am also getting the same problem. In order to avoid this what needs to be done. Kindly shed some light on this.

[Former Member]

I have issue close to this one. When session dies account link still exist, but when user tries to access any page that requires hard login RequireHardLoginBeforeControllerHanlder can't get acceleratorSecureGUID and redirects to login page. How can i fix it?

[Former Member]

it was after 30 min sorry my bad..