tab layout - automatic logout on timeout not working

[openemr]

tab layout - automatic logout on timeout not working

[bradymiller]

Placed a fix for this here:
#278

What is happening was the repeating background_services ajax call was killing the session via timeout in auth.inc, but since the javascript in auth.inc never made it to the browser, the auto-logout was not done. To fix this, set it so these repeating calls can not cause the logout to happen.

This may not be an ideal solution.

[bradymiller]

Perhaps skipping it whenever an ajax call is done would be more ideal?
http://stackoverflow.com/questions/19794859/detect-ajax-in-php

[sunsetsystems]

I have used a GET parameter "running_as_ajax=1" in the fee sheet logic to detect that case. No idea how fragile or browser-dependent this other method would be. Anyway if your commit works I'm happy.

[bradymiller]

Note it does not do an auto logout, however (if try to do something after the timeout, it will logout). I think to get the auto logout really working will require a simple hidden iframe based on interface/main/daemon_frame.php script (interface/main/tabs/daemon_frame_tabs.php) that simply just keeps refreshing every 60 seconds or so. Thus on a timeout, it will then do a auto-logout without any user input.

[bradymiller]

If got above working, then would likely migrate the background services check and the future messages check to that script.

[sunsetsystems]

That makes sense to me. I guess an ajax success handler could do that too? I would look at how the browser reacts in each case... i.e. it's best if the browser does not show a "busy indicator" when these events happen.

[bradymiller]

Just committed the above fix to fix the site id is missing bug when the user tries to do something after a timeout; it will now instead logout.

Will now work on the fix to support auto-logout without any user insteraction.

[bradymiller]

@sunsetsystems ,

Placed a PR for this:
#285

It is working, but notably the browser does show a very brief "busy indicator" when this script is reloaded. Not sure how to avoid this while also ensuring the auth.inc javascript is rendered correctly.

[sunsetsystems]

Awesome, thanks!

[bradymiller]

Committed above PR.