This problem affects the following products:
- All HealthShare® Solutions products (except Personal Community):
- Version 2024.2
- Older versions, if they have been patched with HSIEO-11556 as noted in
Advisory: Authentication Timeout During Device Sleep Does Not Trigger Full Logout
that was distributed in March 2025:
2021.2 • 2022.1 • 2022.2 • 2023.1 • 2023.2 • 2024.1
Requirements:
- Embedded clinical user interfaces (embedded Clinical Viewer or Angular UI in Nav App)
When a user logs in to a HealthShare clinical user interface (UI), a browser session is created.Under expected operating conditions, if the user is inactive for a period of time that exceeds the application timeout (which defaults to 15 minutes):
- The browser session expires.
- The browser redirects to the login page.
- The user must use log in again in order to continue using the application.
The following two timeout issues were identified in HealthShare version 2024.2 (and in instances patched with HSIEO-11556):
- If the user is in an embedded Clinical Viewer UI, after 15 minutes the session may not properly expire and the user may not time out. If the timeout is configured to be shorter, then there is no issue.
- If the user is in an embedded Angular UI within the Navigation Application, (for example, Reports, Documents, or Care Management), when the embedded UI app times out, the navigation application may not correctly time out, causing the user to not become logged out properly, such that they can continue to navigate using Navigation Application.
This is a comprehensive fix that requires several referenced JIRAs, including both front-end and back-end changes:
- Unified Care Record: HSIEO-11556, HSIEO-12503, HSIEO-11590.
- Clinical Viewer and Care Community: HSEUA-270, HSEUA-1389.
These corrections are included in version 2025.1 and will be included in all future product releases. They are also available for older affected versions via ad hoc change file (patch) or full kit distribution by contacting the Worldwide Response Center (WRC).