Przejdź do głównej zawartości

v2.0.1 Devops

· 2 min aby przeczytać
John Renfrew
John Renfrew
Programmer and data architect

Version 2.0.1 backend improvments​

  • 404 errors
  • session timeout

404 errors​

If a users selects a link to download or view a document and the file is unavailable, a dedicated 404 error page is presented. A notification by Pushover is immediately sent, containing the link for the missing page, allowing for a quick fix.

portfolio

Session timeout​

A session timeout has been applied to PRAXIS for students. If a student is logged in and then closes the browser window, they are still logged in for the duration of the timeout, and so can navigate directly to routes in the app. This is very useful but does provide a small unintended hole, that if another user has access to the device, then they would be able to see data belonging to the other user. This is no different to a shopping cart for Amazon remaining accessible, but is not really desireable.

Once the timeout is reached any request for data will redirect the user back to /login. Currently set at 6 hours, to allow a decent working session, we are investigating adding an activity flag to Clerk, storing a lastActivityTime alongside the lastLogged in, and then using that with a much shorter timeout (60 mins)