yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1211535] Re: HorizonMiddleware class causes excessive session creation

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Mon, 31 Mar 2014 16:02:04 -0000
Reply-to: Bug 1211535 <1211535@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: horizon
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1211535

Title:
  HorizonMiddleware class causes excessive session creation

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  In HorizonMiddleware there are several session fields that get
  addressed / setup that can create sessions.  If there is any type of
  health check script (which does not maintain sessions) that hits a non
  authenticated url, then many sessions will be created.

  If using cookie backed sessions this is less of an issue, but when
  using db backed session stores the session count grows too large very
  quickly.

  Propose to place the session field modification in a block with if
  request.user.is_authenticated(): around it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1211535/+subscriptions