Summary

Server status REST API loops continuously even though the session expire

Steps to Reproduce

1. Log into Bamboo from browser.
2. Remove Anonymous user permission from Global Permission
3. Restart Bamboo server.

Expected Results

• /rest/api/latest/server will stop after receiving error

Actual Results

• /rest/api/latest/server receive 401 error and keep on looping for every 30 seconds

Notes

• Use Google Chrome Developer Tools Network tab to check the network traffic
• User may not notice the session timeout
• The problem will also happen when browser session timeout (without restarting Bamboo server)
• This problem will produce a huge amount of 401 errors in Tomcat access log - the security team will perceive this as an attack

Workaround

1. Shutdown Bamboo
2. Edit the file <bamboo-install>/atlassian-bamboo/scripts/serverstate.js to add "doPoll = false" to the following line:

                   error: function (request, textStatus, errorThrown) {
                       updateStatus({state: BAMBOO.ADMIN.STATUS_ERROR}, textStatus + ": " + errorThrown);
                       doPoll = false;
                   }
   

3. Restart Bamboo
4. User may need to restart browser due to browser cache