IP change should not log the user out
Description
When logging into fusiondirectory, getting randomly logged out with messages like "your IP has changed." Fusion Directory makes the assumption that sessions are tied to a single IP address and that one computer has only one.
On dual stack hosts, this is most often not the case. going to fusiondirectory.something with A and AAAA record results in the clients switching between v4 and v6 occasionally, especially if there is some latency.
It makes no sense to tie a session to an IP address, as people roam between 4G and WiFi all the time as well. With IPv6 privacy addresses, host IP addresses change every hour by default as well. The old one is still available for open connections, but HTTP is not stateful like that.
FusionDirectory Version
1.0.19 - 1.3-dev
Steps to Reproduce
- Log in
- Wait for IP change
- Try to do stuff
Expected behavior: Expect to be able to do stuff :-)
Actual behavior: Get an error that my IP changed and get logged out.
Reproduces how often: Every few minutes :(