Fix ajax no access error#23910

Open

chippison wants to merge 26 commits into5.x-devfrom

fix-ajax-no-access-error

Commits on Jan 19, 2026

Adding a session expired header to the NoAccessException error

chippison
authored and
sgiehl
committed
put back old version of Access.php

chippison
authored and
sgiehl
committed
adding a flag to indicate session has expired

chippison
authored and
sgiehl
committed
add indication that session is invalid/expired when token in request is not the same as token saved for user

chippison
authored and
sgiehl
committed
adding a check that login and token auth is null as indication that session has expired or is invalid

chippison
authored and
sgiehl
committed
only enforcing 401 http code in header when session expired flag is true otherwise, just fail silently return error message

chippison
authored and
sgiehl
committed
Making sure we 'await' when saving testEnvironment as well as waiting for network to be idle before doing some page actions

chippison
authored and
sgiehl
committed
making widgetloader open a blank page first

chippison
authored and
sgiehl
committed
fixing test

chippison
authored and
sgiehl
committed
adding options override

chippison
authored and
sgiehl
committed
remove commented out code

chippison
authored and
sgiehl
committed
changing the test so that it now just checks for the session expired error message since we have put back most ajax calls to fail silently

chippison
authored and
sgiehl
committed
test using a different test fixture

chippison
authored and
sgiehl
committed
adding back the test to check the error message is shown

chippison
authored and
sgiehl
committed
Improve detection of session timeouts
sgiehl
committed
use custom header instead of status code
sgiehl
committed
Adds UI test
sgiehl
committed
presere timeout state in cookie
sgiehl
committed
making sure the setting the session expired flag to true when expiration time is empty/null

chippison
authored and
sgiehl
committed
handling the case where anonymous user is allowed to view the site. This results in a successful call (since we allow anonymous user to access the api), we just need to check the session timed out …

chippison
authored and
sgiehl
committed
adding tests; removed unused space

chippison
authored and
sgiehl
committed
updating systems test and integration tests for Core to reflect our changes to returned http code and exception thrown.

chippison
authored and
sgiehl
committed
updating UI tests

chippison
authored and
sgiehl
committed
fixed missed test after testing

chippison
authored and
sgiehl
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Fix ajax no access error#23910

Fix ajax no access error#23910
chippison wants to merge 26 commits into5.x-devfrom
fix-ajax-no-access-error

Commits on Jan 19, 2026

Adding a session expired header to the NoAccessException error

put back old version of Access.php

adding a flag to indicate session has expired

add indication that session is invalid/expired when token in request is not the same as token saved for user

adding a check that login and token auth is null as indication that session has expired or is invalid

only enforcing 401 http code in header when session expired flag is true otherwise, just fail silently return error message

Making sure we 'await' when saving testEnvironment as well as waiting for network to be idle before doing some page actions

making widgetloader open a blank page first

fixing test

adding options override

remove commented out code

changing the test so that it now just checks for the session expired error message since we have put back most ajax calls to fail silently

test using a different test fixture

adding back the test to check the error message is shown

Improve detection of session timeouts

use custom header instead of status code

Adds UI test

presere timeout state in cookie

making sure the setting the session expired flag to true when expiration time is empty/null

handling the case where anonymous user is allowed to view the site. This results in a successful call (since we allow anonymous user to access the api), we just need to check the session timed out …

adding tests; removed unused space

updating systems test and integration tests for Core to reflect our changes to returned http code and exception thrown.

updating UI tests

fixed missed test after testing

Commits on Jan 20, 2026

apply review feedback

Adds UI test