User is logged out from FOLIO when do bulk edit in "Bulk edit" app

Description

Overview:
When User is doing bulk edit for a long time (more than 10 minutes) the User is logged out from the application

Steps to Reproduce:

  1. Log into FOLIO as User with the following permissions: Bulk Edit: In app - Edit inventory records, Inventory: All permissions

  2. Go to “Bulk edit“ app

  3. Select “Inventory-holdings“ record type

  4. Select “Holdings UUIDs“ record identifier

  5. Click “or choose file“ button => Upload file with ~100.000 valid Holdings UUIDs

  6. Do bulk edit of Holdings records

Expected Results:

During bulk edit flow the User is not logged out from FOLIO

Actual Results:

During bulk edit flow the User is not logged out from FOLIO multiple times

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Attachments

1

Checklist

hide

Activity

Show:

Khalilah GambrellApril 29, 2024 at 3:34 PM

This is an environment issue and we need to make sure that these settings account for using services like Bulk-edit or Lists where it may take some time for jobs to complete.

Mikita SiadykhApril 22, 2024 at 7:35 PM
Edited

actually I can’t see RT in headers as well, mb one more browser quirk

even if the RT TTL is an hour

I don’t say 1 hour is enough, it’s just a confirmation that it’s equal to AT expiration and no refresh requests are sent. RT TTL should be much more longer than AT TTL

I can’t know if people experienced issues with other modules - now it sounds like session is 1 hour in total, and it could be noticed by QAs who track long running jobs

Zak BurkeApril 22, 2024 at 7:26 PM

, even if the RT TTL is an hour, that’s not long enough in the scope of a job that “may last a few hours” if there is no interaction with other APIs during that time. As to “I don’t see RT cookie”: I think this is just a browser quirk. I perpetually have problems getting browsers to correctly show cookies: there will be nothing in Application > Cookies, yet I can plainly see them in the request headers of the network inspector and in the response from the login request. It’s super frustrating, but I don’t think it’s the source of the problem here.

Mikita SiadykhApril 22, 2024 at 3:49 PM

actually on bugfest RT TTL is 1 hour (similar to AT), but I don’t see RT cookie - mb it’s a cause of it

probably you would be interested to take a look as well

Khalilah GambrellApril 22, 2024 at 3:26 PM

Hey and - we think it the RTR refresh token is set too short (10 minutes). You guys should ask Kitfox to update the RTR refresh token to a timeframe that aligns with bulk-edit needs and then re-test.

We should discuss adding this information to release notes.

Won't Do

Details

Assignee

Reporter

Priority

Sprint

Development Team

Stripes Force

Release

Quesnelia (R1 2024) Bug Fix

RCA Group

Environmental/deployment issue

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created April 4, 2024 at 11:58 AM
Updated May 17, 2024 at 11:57 AM
Resolved April 29, 2024 at 3:34 PM
TestRail: Cases
TestRail: Runs