Bug #33094

security token when relogin after session expired

Added by DevEthic over 9 years ago. Updated over 3 years ago.

Must have
Target version:
Start date:
Due date:
% Done:


Estimated time:
TYPO3 Version:
PHP Version:
Is Regression:
Sprint Focus:


when i re login me, from the extjs window, after my session has expired, i've ExtDirect security token alert :

- on page icon click : context menu not displayed
- on page title click : form not appears

typo3 version 4.5.10

arrives with chrome, not tested with another browsers



Updated by Ernesto Baschny over 9 years ago

  • Target version changed from 4.5.11 to 4.5.12

Updated by Bart Dubelaar about 9 years ago

See #24870, might be caused by the configuration of $TYPO3_CONF_VARS['BE']['loginSecurityLevel']


Updated by Bart Dubelaar about 9 years ago

Found an interesting workaround. Enter a wrong password first and then enter a correct password.
For me this works. The problem lies in the function hasLoginBeenProcessed() of class.ajaxlogin.php.
In this class the following compare is done:

((string)$_COOKIE['be_typo_user'] !== (string)$GLOBALS['BE_USER']->id)

For me these are equal when I enter the correct password directly, but they are different after entering a wrong one first.


Updated by Bart Dubelaar about 9 years ago

It seems like that all goes well only by accident with the default loginSecurityLevel. This is because the getChallenge request of the extjs loginbox effectively logs out the user before doing the real authentication. This explain why the "wrong password first" workaround works, as this also logs out the user first.


Updated by Fronzes Philippe almost 9 years ago


I get this error too, with version 4.5.19, and with default 'loginSecurityLevel'.


Updated by Mathias Schreiber over 6 years ago

  • Target version changed from 4.5.12 to 7.4 (Backend)
  • Is Regression set to No

Updated by Susanne Moog about 6 years ago

  • Target version changed from 7.4 (Backend) to 7.5

Updated by Benni Mack almost 6 years ago

  • Target version changed from 7.5 to 8 LTS

Updated by Benni Mack over 4 years ago

  • Target version changed from 8 LTS to next-patchlevel

Updated by Riccardo De Contardi over 3 years ago

  • Status changed from New to Closed
  • Target version deleted (next-patchlevel)

Extjs has been dropped, so I think it should be safe to close this one for now.

If you think that this is the wrong decision or experience the issue again, please reopen it or open a new issue with a reference to this one.

Thank you and best regards

Also available in: Atom PDF