[TYPO3-dev] AJAX ReLogin does not work

[Niels Pardon]

Niels Pardon schrieb:
> $_SESSION['login_challenge'] before the update in backend.php:
> dcc5a2bb54631da50371d8aa7eba7fae
> 
> $_SESSION['login_challenge'] after the update in backend.php:
> b7d8038cce3df6570c7d52a6cfeac9e6
> (This is the value put in the JS)
> 
> $_SESSION['login_challenge'] in the AJAX request to
> /typo3/ajax.php?ajaxID=BackendLogin%3A%3AisTimedOut&skipSessionUpdate=1:
> 32aed7785d3faf4b7a329fe8c5223f00
> 
> So why do we have 3 different login challenges during one session?

It seems that as soon as the login expires in the background the page
containing the "click here to re-login" link (the old one) is loaded and
therefore a new login challenge is generated by backend.php. Although
this is not visible to user.

Greets,

Niels