Apache Allura™

Forge software for hosting software projects

Brought to you by: alexluberg, brondsem, ccruz, deshani, and 11 others

Carlos Cruz wants to merge 2 commits from /u/ccruz/allura/ to master, 2025-07-25

If the auth.reject_untracked_sessions setting is enabled to enforce session tracking, already logged in users would have their sessions invalidated and logged out. Update fixes this issue by tracking the current session for a logged in user that has not had any previous session tracked.
Fixed an issue that would cause an invalidated session to completely log out a user, including clearing their CSRF login token, then after trying to log in again, a 403 page would be displayed.

Commit	Date
[ca0e41] (cc/10285) by Carlos Cruz fixup! Track user sessions for already logged in users	2025-07-23 20:51:02	Tree
[49a519] by Carlos Cruz Track user sessions for already logged in users	2025-07-18 17:45:11	Tree

Guillermo Cruz - 2025-07-25

Status: open --> merged
If you would like to refer to this comment somewhere else in this project, copy and paste the following link: