[TYPO3-project-4-3] ExtJS modal relogin window does not work as it should
Xavier Perseguers
typo3 at perseguers.ch
Sun Jun 14 14:24:52 CEST 2009
Hi,
I guess many of view already encountered the problem that they could not
log in anymore using the modal AJAX-based login window once timeout
occured and that they ended clicking the "logout" button to get the
standard plain-old login window to be able to log again.
In the history of trunk, there was time when this login dialog did not
work at all but in fact, it works but not as it should.
TYPO3 uses a superchallenge mechanism and put a hidden field challenge
that is submitted with form (and used to salt the client-hashed password
that is submitted). But this challenge has a small lifetime and if you
get the relogin dialog and do not log in again quick enough, you won't
be able to log in.
Moreover, when you use the AJAX login with this dialog and put some
invalid data (that is you should not be able to log in anyway), you get
a login failure error but the challenge is not refreshed with a new one,
meaning you won't be able to log in anyway after that failure.
Being currently quiet occupied with "green vacancies" (swiss people will
understand), I cannot find time to write a patch now.
--
Xavier Perseguers
http://xavier.perseguers.ch/en
One contribution a day keeps the fork away
More information about the TYPO3-project-4-3
mailing list