mirror of
https://git.proxmox.com/git/pve-manager
synced 2025-08-15 02:28:34 +00:00
1370f62818
While we nowadays can work much better with package upgrades relating the cluster stack it still happens that a pve-cluster upgrade can produce a false-positive 401 (auth failure) code for a currently valid ticket, e.g., because a pmxcfs lock was requested but the pmxcfs was currently not mounted due an upgrade triggered restart. A frequent case for a few false positive 401 is also a cluster creation, especially if not done over the web GUI. Thus add a counter, which gets set to 0 on each successful login or ticket renewal and gets increased on each 401 error. Only show the logged out window if we get five or more 401 responses. While 5 may sound a bit much one needs to remember that we always have quite a few API call in flight (resource update store, stores from current panel ...) and thus, if one got really auth denied it will still show quite fast (1 to 5 seconds, depending on which panel is currently opened). Further, the backend naturally does not allows to do anything during this time, this has no security implications whatsoever. Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com> |
||
|---|---|---|
| aplinfo | ||
| bin | ||
| configs | ||
| debian | ||
| network-hooks | ||
| PVE | ||
| services | ||
| test | ||
| www | ||
| .gitignore | ||
| defines.mk | ||
| Makefile | ||
| spice-example-sh | ||
| vzdump-hook-script.pl | ||