Major Tested with the following steps:
1. Logged in as demo user to OpenAM
2. Logged in as an admin user to OpenAM (in private browser mode)
3. Navigated with admin user to the sessions page in main realm and searched for demo user session
4. Found demo user session and waited for the idle time to be at least 3 minutes
5. Made following request :
curl -X POST -H "iPlanetDirectoryPro: AQIC5wM2LY4SfcxvhU0AbC1wjrH8Tc2QG5-A_N6VtUQfgF4.*AAJTSQACMDEAAlNLABM4ODg0NDUxNTc4MTE1NzE3ODI0AAJTMQAA*" -H "Cache-Control: no-cache" "http://joanna16.example.com:8080/openam/json/sessions/?_action=refresh&tokenId=AQIC5wM2LY4SfcyLX_7mwQFitlueN9hgvfPxej4YVGaKudo.*AAJTSQACMDEAAlNLABQtNTE4ODU3OTE2NzI3OTIwOTc2MAACUzEAAA..*"
where :
demo user token:
AQIC5wM2LY4SfcyLX_7mwQFitlueN9hgvfPxej4YVGaKudo.*AAJTSQACMDEAAlNLABQtNTE4ODU3OTE2NzI3OTIwOTc2MAACUzEAAA..*
admin token:
AQIC5wM2LY4SfcxvhU0AbC1wjrH8Tc2QG5-A_N6VtUQfgF4.*AAJTSQACMDEAAlNLABM4ODg0NDUxNTc4MTE1NzE3ODI0AAJTMQAA*
Actual Result:
the response I've got was:
{"uid":"demo","realm":"/","idletime":365,"maxidletime":30,"maxsessiontime":120,"maxtime":6502}
The demo user session has not been refreshed (it was still showing remaining time ~27 minutes instead of being reset to 30 minutes)
Expected Result:
{"uid":"demo","realm":"/","idletime":0,"maxidletime":30,"maxsessiontime":120,"maxtime":6502}
The demo user session should be refreshed and should show remining idle time 30 minutes