GrimReaper 4748 Posted August 27, 2023 Posted August 27, 2023 (edited) Had some screenshot sent form a user Tarik this morning, noticed by coincidence this evening that his Authentication wasn't logged in the Activity log at all - and neither was my own authentication from user Home later on. I can see his activity starting from 2023-08-27 10:22:05.522 and some playback events - nothing of which was logged under Activity tab. Log for the day attached. embyserver.txt Edited August 27, 2023 by GrimReaper
Luke 42083 Posted August 28, 2023 Posted August 28, 2023 hi, what exactly were you expecting to see? when they first authenticate it will generate an event. It's not going to create one every single time they just come back and reopen the app.
GrimReaper 4748 Posted August 28, 2023 Author Posted August 28, 2023 Honestly, I was expecting to see his authentication as there were none prior in the day, ditto for my ATV app as it is set to 1hr logoff hence no user was logged at that time. How long do sessions last?
Luke 42083 Posted August 29, 2023 Posted August 29, 2023 Well what are you defining as a session? There isn't really the concept of a session that goes away anymore due to idle time. They login, they have a session until they are logged out.
GrimReaper 4748 Posted August 29, 2023 Author Posted August 29, 2023 Well, I would assume that connections are not kept alive indefinitely, web sockets closed etc. Since server was restarted at 03:40AM (and presumably all connections closed, if any) , I expected that 10:22 authentication would show, ditto for ATV app in the evening, which is configured on 1 hr logoff time and wasn't used since the previous day.
Luke 42083 Posted August 29, 2023 Posted August 29, 2023 Sessions are not tied to the web socket lifetime. With devices that support push notifications, the server can communicate with the app anytime, even if both sides have been restarted. So that’s why all it really needs is to be logged in. 1
GrimReaper 4748 Posted September 3, 2023 Author Posted September 3, 2023 Thanks, but I'm still having hard time understanding how a logon on device that is set to logoff automatically doesn't get logged.
Luke 42083 Posted September 3, 2023 Posted September 3, 2023 11 minutes ago, GrimReaper said: Thanks, but I'm still having hard time understanding how a logon on device that is set to logoff automatically doesn't get logged. A new authentication?
GrimReaper 4748 Posted September 3, 2023 Author Posted September 3, 2023 Just now, Luke said: A new authentication? On 8/29/2023 at 8:26 AM, GrimReaper said: ditto for ATV app in the evening, which is configured on 1 hr logoff time and wasn't used since the previous day.
Luke 42083 Posted September 3, 2023 Posted September 3, 2023 I mean was there a password entered to reauthenticate?
GrimReaper 4748 Posted September 3, 2023 Author Posted September 3, 2023 2 minutes ago, Luke said: I mean was there a password entered to reauthenticate? I honestly don't know, AndroidTV app is configured to logoff after 1 hr and Remember Last User so it logs-in automatically on app start, with that particular user not requiring password on local network - whether it is exchanged between server and client in that scenario have no idea.
Luke 42083 Posted September 7, 2023 Posted September 7, 2023 I think this is a little vague and we'd have to go into specifics, but you're only going to see an authentication related activity event if they are signing in again, not just restoring previously saved authentication. So I think that's what this comes down to. There's no activity log entry just from re-running the app again. If there were, there'd be a flood of activity every time you open the web app, every time you just refresh the page in the browser, etc.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now