Skip to content

401 Unauthorized response to check_session doesn't trigger logout #290

@nmcharlton

Description

@nmcharlton

When a user's session has expired, the JWT token changes or a developer switches between a local backend and a cloud backend, reloading the dashboard triggers several API calls that return 401 (unauthorized) errors.

This triggers confusing errors in development:
Screenshot 2022-01-14 at 21 09 52
In production, the dashboard appears stuck, with no indication of what's happened:
Screenshot 2022-01-14 at 21 10 12
It should be up to /auth/check_session to check whether the session is still valid, and a 401 response to this should trigger a logout redirect, but this doesn't seem to be working properly.
Other API calls should ideally be paused until check_session has completed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    on holdAwaiting progress on other items before a decision is madesize: mediumMedium-size issuetype: bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions