• Type: Bug
• Resolution: Fixed
• Priority: Major
• Fix Version/s: 4.2.0
• Affects Version/s: None
• Component/s: None
• Labels:

  None

[RUNTIME-3041] CaptchaHelper data are not well purged

Collapse comment: Bérénice Maurel added a comment - 08/Jan/19 17:16

Bérénice Maurel added a comment - 08/Jan/19 17:16

After a reflection, we decided to add a schedulable to clean the captcha cache. We can do it at each generation/validation of a captcha, but it can be greedy if there are a lot of connections.

The periodicity of cleaning is a mandatory config parameter if the internal Ametys captcha is selected as captcha type.

Expand comment: Bérénice Maurel added a comment - 08/Jan/19 17:16

Bérénice Maurel added a comment - 08/Jan/19 17:16 After a reflection, we decided to add a schedulable to clean the captcha cache. We can do it at each generation/validation of a captcha, but it can be greedy if there are a lot of connections. The periodicity of cleaning is a mandatory config parameter if the internal Ametys captcha is selected as captcha type.

Collapse comment: Bérénice Maurel added a comment - 08/Jan/19 14:18, Edited by Bérénice Maurel - 08/Jan/19 14:20

Bérénice Maurel added a comment - 08/Jan/19 14:18 - edited

The old captchas are removed only on validating a captcha and only if we try to validate a "static" captcha which is rarely used. And only if one of the static cache is invalid (not the dynamic one), and only if the capcha we are testing is not the corresponding one.

Also, maybe captchas cache should be updated each time we get a new one. Because if a user refresh his captcha without validating several times, it fill the cache.

Expand comment: Bérénice Maurel added a comment - 08/Jan/19 14:18, Edited by Bérénice Maurel - 08/Jan/19 14:20

Bérénice Maurel added a comment - 08/Jan/19 14:18 - edited The old captchas are removed only on validating a captcha and only if we try to validate a "static" captcha which is rarely used. And only if one of the static cache is invalid (not the dynamic one), and only if the capcha we are testing is not the corresponding one. Also, maybe captchas cache should be updated each time we get a new one. Because if a user refresh his captcha without validating several times, it fill the cache.