Dr. Loraine pointed out that it would be nice if a user was returned to the same directory location when they logged back in after the token has expired.

Situation: User is in a directory, 16 hours has passed and the token expires. User is logged out and sent back to cyverse login page. User logs back in and instead of going to the base home directory, is redirected to whatever directory they were previously working in.

Thoughts: When the user is logged out and we send them to the cyverse login page (https://auth.cyverse.org/cas5/oauth2.0/authorize) we include a redirect URI. We may be able to set this as the user's current URI so that when they log back in they are sent to the directory where they were working.

I did some additional testing through Postman. It looks like including the user's location in the redirect URI will work. Need to make sure that the URI is encoded to avoid special characters causing problems (Chaitanya was working on encoding files and folders in IGBF-2275 and IGBF-2292).

Merged https://bitbucket.org/nfreese/django-cyversedev/pull-requests/153/igbf-2299/diff

Merged https://bitbucket.org/nfreese/django-cyversedev/pull-requests/155/igbf-2292-changes/diff

Testing:

If I am in either the shared with me or community folders when I am logged out, when I log back in I'm taken to the correct folder (url is correct), but the breadcrumbs are broken and the left panel Home is highlighted.

See attached screenshot

If user was in the analyseslog when logged out it tries to direct them back to the analyses log but fails.

If user was in the search directory when logged out it tries to direct them back to their search but fails.

Seems like the redirect after logging out/in works correctly if the user is in their home directory, but is breaking in the shared/community directories and the analyses/search "directories".

The URLs when logged back in are correct, but there must be something wrong with the API call as they fail.

Nowlan Freese

I have fixed the Shared, Community, Analyses for both breadcrumbs and left panel highlighting issues.
will fix the search issue with this ticket code changes.
https://jira.transvar.org/browse/IGBF-2355

bitbucket code changes link:
https://bitbucket.org/nfreese/django-cyversedev/pull-requests/156/igbf-2292_changes/diff

Could you please test and please let me know if you find anything breaks.

Tested on chaitanya.bioviz.org

Working:
Redirect is working for Shared, Community, Analysis, with breadcrumbs and left-panel appearing correctly.
Make public link: working correctly
Metadata: working correctly

Not working:
Analysis: Not appearing for files (such as bam).
View in IGB: Not appearing for any files.

Note: I think this is separate from this issue, but I noticed that if a file/folder has special characters, removing the public link is correctly removing anonymous (public) read access to the file, but the public link still appears to be functional. Testing on a file/folder with no special characters works correctly (if no public access, public url is immediately invalidated). We might want to test this further, as it could be an underlying issue with CyVerse, and may be important to point out to them.

Working:
Redirect is working for Shared, Community, Analysis, with breadcrumbs and left-panel appearing correctly.
Make public link: working correctly
Metadata: working correctly
Analysis: working correctly
View in IGB: working correctly

Discussion with Chaitanya:

After 16 hours we were removing user from Redis database. This was causing an issue with the log out, as once the user was removed from the redis database it was breaking the log out flow.

New approach: Redis database should keep track of user for 80 hours. After 16 hours (length of access token), the access token needs to be marked as invalidated. If the user tries to do something on the page, they will be redirected to the login page. Upon login, they will be redirected to previous working directory. If the user has not logged back in after 80 hours, they will be removed from the redis database. If they log in, they will be redirected to their home directory.

Pull Request Code Changes for the above behavior.

https://bitbucket.org/ckintali/latest-ck-django-cyversedev/commits/cce8ce0a08665bec5ad8eea2f2410de63f278481

Also Need to change the redis expiry token in settings.ini to 288000 seconds.

Merged https://bitbucket.org/nfreese/django-cyversedev/pull-requests/167/igbf-2299/diff

Testing on Mac on chaitanya.bioviz.org on Firefox.

Using the logout URL to test: https://auth.cyverse.org/cas5/logout?service=https://chaitanya.bioviz.org/

User redirected successfully to prior location if in analyses log, home directory, shared, or community.

BioViz Connect breaks if the user is in Search when logged out. When I logged back in and it tried to redirect back to Search, it then logged me back out again and upon logging in went to connect.bioviz.org.

For the redis expiry, make sure we update the documentation for setting up the redis database.

One Edge Case to keep in mind for future purposes.

1) Search for a file
2) Hit the logout URL in another tab
3) Refresh the page

The user is redirected to the login page and when logged back in the user is shown a new list of files. The root cause for this issue is the page cannot identify which section the user is currently in from the URL after a page refresh.

All other Scenario's are working as expected.

Merged https://bitbucket.org/nfreese/django-cyversedev/pull-requests/169/master/diff

Working correctly, closing issue.