Page MenuHomePhabricator

Handle loss of session data
Closed, ResolvedPublic

Description

The user can be logged out due to several reasons and then the token will be illegal and use of it will lead to a session failure. In ApiSetItem this is reported as a no-token -error which is wrong. When this happens the error message should be intercepted and the user logged in again. Preferably without the user loosing any on-going changes.

A guess is that a small popup window asking for user credentials should be sufficient, and after logging in the user through the ordinary API the Wikibase API can be queried for new token(s).


Version: unspecified
Severity: normal

Details

Reference
bz37227

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 12:30 AM
bzimport set Reference to bz37227.
bzimport added a subscriber: Unknown Object (MLST).

API needs to return new token on session loss. AJAX calls should recognize that error, replace the token, and let the editor retry (could even automatically retry).

A new session might be needed as well.