[GH-ISSUE #1448] User stay logged in during an upgrade and then cause crashes #1144

Closed
opened 2026-02-27 11:15:31 +03:00 by kerem · 0 comments
Owner

Originally created by @ntninja on GitHub (Apr 2, 2018).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/1448

Impacted versions

  • Modoboa: 1.10.x (but probably any)
  • installer used: No
  • Webserver: Nginx + Gunicorn + Docker

Steps to reproduce

  1. Log into your (admin) user account in Modoboa 1.9.x in your browser
  2. Do the upgrade from 0.9.x to 0.10.x (finally)
  3. Reload the page in the browser
  4. Open the “Webmail” tag/app

Current behavior

A crash is displayed because the password cookie format apparently changed between versions and the fernet decryption of the old contents failed with an exception…

Expected behavior

Either the cookies should be migrated or (much more reasonable) all currently active user session should be invalidated during an upgrade (probably during the database migration?)

Originally created by @ntninja on GitHub (Apr 2, 2018). Original GitHub issue: https://github.com/modoboa/modoboa/issues/1448 # Impacted versions * Modoboa: 1.10.x (but probably any) * installer used: No * Webserver: Nginx + Gunicorn + Docker # Steps to reproduce 1. Log into your (admin) user account in Modoboa 1.9.x in your browser 2. Do the upgrade from 0.9.x to 0.10.x (finally) 3. Reload the page in the browser 4. Open the “Webmail” tag/app # Current behavior A crash is displayed because the password cookie format apparently changed between versions and the fernet decryption of the old contents failed with an exception… # Expected behavior Either the cookies should be migrated or (much more reasonable) all currently active user session should be invalidated during an upgrade (probably during the database migration?)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/modoboa-modoboa#1144
No description provided.