UnexpectedValueException from line 230 of SessionManager.php - Can neither load the session nor create an empty session
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	Addshore
	Jan 26 2016, 5:52 PM

Description

On current master (3e9d3ec8c208287ded41fcce0adbcf179edb9f39) I was prompted to change my password on my local test instance as my password was "password" and this is no longer allowed.
Upon changing my password the following appeared:

Fatal error: Uncaught exception 'InvalidArgumentException' with message 'Session ID already exists' in mediawiki\includes\session\SessionManager.php on line 230
InvalidArgumentException: Session ID already exists in mediawiki\includes\session\SessionManager.php on line 257
UnexpectedValueException: Can neither load the session nor create an empty session in mediawiki\includes\session\SessionManager.php on line 230

The the following stack in the logs:

2016-01-26 17:45:38 ADSH my_wiki: [f2776f98] /w/index.php/Special:ChangePassword   UnexpectedValueException from line 230 of mediawiki\includes\session\SessionManager.php: Can neither load the session nor create an empty session
#0 mediawiki\includes\WebRequest.php(658): MediaWiki\Session\SessionManager->getSessionById(string, boolean, WebRequest)
#1 mediawiki\includes\WebRequest.php(952): WebRequest->getSession()
#2 mediawiki\includes\user\User.php(4075): WebRequest->getSessionData(string)
#3 mediawiki\includes\user\User.php(4104): User->getEditTokenAtTimestamp(string, WebRequest, string)
#4 mediawiki\includes\resourceloader\ResourceLoaderUserTokensModule.php(47): User->getEditToken()
#5 mediawiki\includes\resourceloader\ResourceLoaderUserTokensModule.php(66): ResourceLoaderUserTokensModule->contextUserTokens(ResourceLoaderContext)
#6 mediawiki\includes\resourceloader\ResourceLoaderModule.php(575): ResourceLoaderUserTokensModule->getScript(ResourceLoaderContext)
#7 mediawiki\includes\resourceloader\ResourceLoaderModule.php(543): ResourceLoaderModule->buildContent(ResourceLoaderContext)
#8 mediawiki\includes\resourceloader\ResourceLoader.php(976): ResourceLoaderModule->getModuleContent(ResourceLoaderContext)
#9 mediawiki\includes\OutputPage.php(2865): ResourceLoader->makeModuleResponse(ResourceLoaderContext, array)
#10 mediawiki\includes\OutputPage.php(3013): OutputPage->makeResourceLoaderLink(string, string)
#11 mediawiki\includes\OutputPage.php(2680): OutputPage->getInlineHeadScripts()
#12 mediawiki\includes\skins\SkinTemplate.php(465): OutputPage->headElement(SkinVector)
#13 mediawiki\includes\skins\SkinTemplate.php(240): SkinTemplate->prepareQuickTemplate(OutputPage)
#14 mediawiki\includes\OutputPage.php(2320): SkinTemplate->outputPage()
#15 mediawiki\includes\MediaWiki.php(753): OutputPage->output()
#16 mediawiki\includes\MediaWiki.php(517): MediaWiki->main()
#17 mediawiki\index.php(43): MediaWiki->run()
#18 {main}

I was also presented with a message saying "Your password has been changed successfully!"
Clicking on my watch list then prompted me to login again
I could then log in with my new password and everything started behaving as expected.

Related Objects

Mentioned In: T188249: Warning from PHPSessionHandler during changePassword.php
Mentioned Here: rMW3e9d3ec8c208: Merge "TableSorter: Avoid FOUC and preserve styling in VisualEditor"

Event Timeline

Addshore created this task.Jan 26 2016, 5:52 PM

Addshore raised the priority of this task from to Needs Triage.

Addshore updated the task description. (Show Details)

Addshore added a project: MediaWiki-User-login-and-signup.

Addshore subscribed.

Restricted Application added subscribers: StudiesWorld, Aklapper. · View Herald TranscriptJan 26 2016, 5:52 PM

Addshore set Security to None.Jan 27 2016, 9:24 AM

Addshore added a subscriber: Anomie.

Lokal_Profil mentioned this in T188249: Warning from PHPSessionHandler during changePassword.php.Feb 26 2018, 1:32 PM

Aklapper removed a subscriber: Anomie.Oct 16 2020, 5:01 PM

Addshore unsubscribed.Jun 27 2023, 12:38 PM

Pppery edited projects, added MediaWiki-Core-AuthManager, TestMe; removed MediaWiki-User-login-and-signup.Wed, Dec 18, 5:48 PM

Restricted Application added a project: MediaWiki-Platform-Team. · View Herald TranscriptWed, Dec 18, 5:48 PM

The session ID gets reset during password change, apparently something went wrong with that and it tried to reuse the old session ID to create a new session. Since the report is very old, not worth looking into IMO - please reopen if it's still happening.

FWIW you can do something like

$wgHooks['isValidPassword'][] = function ( $password, &$result, $user ) {
    if ( $password === 'password' ) {
        $result = true;
    }
};

to avoid your local setup complaining about a weak password.

Tgr closed this task as Declined.Thu, Dec 19, 10:04 PM

UnexpectedValueException from line 230 of SessionManager.php - Can neither load the session nor create an empty sessionClosed, DeclinedPublicActions

Description

Related Objects

Event Timeline

UnexpectedValueException from line 230 of SessionManager.php - Can neither load the session nor create an empty session
Closed, DeclinedPublic
Actions