You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During QA for SecureDrop 1.3.0, @emkllreported the following session handling behavior:
There's an edge case, though not sure it's worth addressing:
Click "Get Started" or hit /generate in both tabs A and B
Click "Submit Documents" in tab A and logout
Click "Submit Documents" in tab B, get immediately redirected to "You were logged out due to inactivity".
This behavior is new to 1.3.0, as prior to #5075, you would get an error on step 1.
For reference, the "Submit Documents" button is displayed on this screen:
Questions:
Would it be preferable to let the user proceed to the submit screen? The downside is that it may result in the confusing generation of a second codename. On the other hand, that may be what the user wanted to do.
If we do bounce the user back to the index page, should we clarify the error message and explain what happened (something to the effect: you logged out in another tab, try logging in again with your codename?)
The text was updated successfully, but these errors were encountered:
Tagged with security as this is a sensitive part of the source experience to make changes to. At the same time, as Mickael noted, this is an edge case, and IMO relatively low priority.
eloquence
changed the title
Clarify error when user attempts to generate codename after logging out
Clarify error when user attempts to generate codename in tab2 after logging out in tab1
May 12, 2020
During QA for SecureDrop 1.3.0, @emkll reported the following session handling behavior:
This behavior is new to 1.3.0, as prior to #5075, you would get an error on step 1.
For reference, the "Submit Documents" button is displayed on this screen:
Questions:
The text was updated successfully, but these errors were encountered: