[ZBX-16666] Can't log in if double slash was in the URL Created: 2019 Sep 23  Updated: 2024 Apr 10  Resolved: 2019 Oct 15

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: 4.0.13rc1, 4.2.7rc1, 4.4.0beta1
Fix Version/s: 4.0.14rc1, 4.2.8rc1, 4.4.1rc1, 5.0.0alpha1, 5.0 (plan)

Type: Problem report Priority: Trivial
Reporter: Natalja Romancaka Assignee: Mārtiņš Tālbergs (Inactive)
Resolution: Fixed Votes: 0
Labels: login, sessions, url
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Team: Team B
Sprint: Sprint 56 (Sep 2019), Sprint 57 (Oct 2019)
Story Points: 0.5

 Description   

Login doesn't work, if the url was with a double slash and then with one slash
Steps to reproduce:

  1. Enter url in the browser address bar as "http://localhost/4.0//"
  2. Log in as Admin
  3. Enter url in address bar as "http://localhost/4.0"
  4. Log out
  5. Try to log in as Admin

Result: Logged in as guest with message on dashboard "Session terminated, re-login, please.". Created two zbx_sessions, for path /4.0 and for /4.0/
Expected: Login successful



 Comments   
Comment by dimir [ 2019 Sep 23 ]

Duplicate of ZBX-16662 ?

<talbergs> I don't know. It may not be.

Comment by Mārtiņš Tālbergs (Inactive) [ 2019 Oct 01 ]

FIXED in development branch feature/ZBX-16666-4.0

Comment by Mārtiņš Tālbergs (Inactive) [ 2019 Oct 09 ]

Available in:

Comment by Mārtiņš Tālbergs (Inactive) [ 2019 Dec 04 ]

This task solved an issue when multiple separated sessions are created for user, if he authorizes with Zabbix using URL with trailing slashes. Since example URLs zabbix.example.com, zabbix.example.com//, zabbix.example.com///// etc., route to the same resource, it was decided that separate sessions should not be created for each of these URLs. From now on all these URLs would create one session.

It is possible, if user was in this "multi session" state before upgrade, wrong session will be used and exact symptoms as described in ZBX-16860 will be observed. In such case user will be forced to clear all Zabbix related cookies from browser.

Comment by Josh Soref [ 2020 Jan 17 ]

This task broke a number of users, see ZBX-17157 for example.

Generated at Thu Jun 05 22:02:56 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.