Page MenuHomeMiraheze

Miraheze Phabricator not remembering login session
Open, NormalPublic

Description

Problem: For the past several weeks, since the server migration (roughly speaking), I have been unable to stay logged in to Miraheze Phabricator either (a) across web browser tab sessions and/or (b) for more than an hour (maybe two?) whereas previously I could.

What Should Happen: Phabricator user's maximum saved login preference, as defined in the user's settings, should be remembered.

Reproducable? Yes, seems to be occurs. Occurs across multiple web browser sessions, after multiple computer reboots, and on different days.

Likely cause/problem: Strongly suspect this is either a cookie configuration problem as defined in Phabricator's administrative controls and/or a configuration issue and likely just requires any Phabricator administrator to fix. @Paladox, perhaps?

System Information: Vivaldi 3.1.1929.45 (Stable channel) (64-bit)
Revision 1eb3263017ed42270818939fbff241845938a81f
OS Windows 10 OS Version 1909 (Build 18363.959)
JavaScript V8 8.3.110.13
Flash 32.0.0.387 C:\WINDOWS\system32\Macromed\Flash\pepflashplayer64_32_0_0_387.dll
User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.119 Safari/537.36
Command Line "C:\Users\Wylie\AppData\Local\Vivaldi\Application\vivaldi.exe" --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --ppapi-flash-path="C:\WINDOWS\system32\Macromed\Flash\pepflashplayer64_32_0_0_387.dll" --save-page-as-mhtml
Executable Path C:\Users\Wylie\AppData\Local\Vivaldi\Application\vivaldi.exe
Profile Path C:\Users\Wylie\AppData\Local\Vivaldi\User Data\Default

Event Timeline

Dmehus triaged this task as Normal priority.Jul 20 2020, 16:50
Dmehus created this task.

I had to login again today, I can't remember when I last logged in though.

@RhinosF1, I can't remember if I created my Miraheze Phabricator account directly, using OAuth and my MediaWiki login, or my GitHub login, but whether I registered with my GitHub login or not, I have been logging in with the "Login with GitHub login" option. I've checked my authorized applications on GitHub and Miraheze Phabricator is not revoked. Not sure if this helps with diagnosing where the configuration problem is or not, but hopefully it will.

While it is possible that this is a Phabricator problem, there are also several scenarios on the user end where this would happen.

This will happen by default if you

  • Clear your web browser or device system cache
  • Clear your web browser's stored cookies or change your settings to not allow cookies
  • Clear/delete your web browsing history
  • Access Phabricator through Incognito mode or the equivalent (the purpose of private browsing is that it does not store cookies or cache)
  • Use a web browser that automatically deletes all information upon closing the browser, regardless of whether you are in Incognito mode or not

I say "by default" because with some browsers/systems, it is possible to configure a "whitelist" where doing any of the above will not have any effect on specific sites - but this is not true for all systems. Cache and cookies together is how systems and applications remember your information such as what is needed to keep you logged in, and therefore if you delete or otherwise restrict this data, you will loose anything that depends on that data.

I’m unable to reproduce the problem, I stay logged in and have been for months across multiple devices and browsers.

@John, have you tried logging in with your GitHub account? Also, @Lakelimbo reported on Discord having the same problem with being unable to stay logged in.

I used to stay logged in as well, but ever since the migration, have not. I will try all those steps suggested by @AmandaCath, but I do think it's quite possibly a configuration issue of some sort.

@John, have you tried logging in with your GitHub account?

I have not. I shall try this and report back

I can confirm that being logged in via GitHub, I was just logged out a few minutes ago randomly.

I can confirm, having logged in via both username + password and using the wiki logon that I get logged out after an hour or two consistently for these past few weeks (testing github logon now). Interestingly, this did not occur on my mobile device (where I logged in using password), and phabricator itself is still reporting that the sessions exist.

As @Dmehus said, it was happening with me as well, but now there's been 2 days and I haven't been logged out randomly
Weird.
(and I'm using the new Microsoft Edge (Chromium), ver. 84.0.522.44 Stable, x64)

That failed too, so I'm checking now to see if it's a browser issue.

It's looking like a potential browser issue, my session has persisted on my current browser (same computer, using Edge instead of Chrome), and there don't seem to be any issues.

I do agree with browser issue. Edge for me persists the session, I’ve been logged in with GitHub for a few weeks now. Chrome however does not persist this to this level for me.

Should we go and file a report with them then?

Should we go and file a report with them then?

I would think so, and close this task as upstream since it doesn't seem we can do anything about it.

It's happened a few times to me again and I would find it strange for it to be upstream since it only started a while ago (maybe one or two weeks)

This issue is getting quite frustrating, for no reason at all I was logged out in the span of two hours twice....

I'm still struggling to reproduce this regardless of how I login. My current session has been going for weeks now

I keep getting logged out as well, which is getting a bit annoying. For me it just started yesterday though.

In T5942#118775, @John wrote:

I'm still struggling to reproduce this regardless of how I login. My current session has been going for weeks now

If I login is GitHub, This does seem to happen often on my Mac.

I haven't had an issue on my phone but that maybe because due to the silly ERR_FAILED bug that's getting really bad it seems like I'm clearing my cookies every few days anyway so of course being logged out of everything.

Just an update but I'm still not able to reproduce this issue.

I was logged out when I went to my Mac today. Out of interest, does anybody else have other accounts on their device that have been used between sessions?

This comment was removed by Reception123.

Does this still happen to anyone? It no longer happens to me.

It also hasn't happened to me for a while, I don't know if it's a coincidence but I recently deleted my cookies for all Miraheze sites...

If I’m correct, I think a lot of people started experiencing this when ‘sameSite’ cookie was added I think? @Paladox can you confirm this theory?

Happens regardless if I use MW oauth or GH, also doesn’t matter if on mobile (Safari) or my laptop (Latest FF dev edition)