Page MenuHomePhabricator

SessionManager: unexpectedly logged out after visiting another wiki
Closed, ResolvedPublic

Description

Steps to reproduce:

  • use Chrome in incognito mode (with X-Wikimedia-Debug header until SessionManager is deployed everywhere)
  • register a new account on enwiki
  • log in with it on meta
  • visit dewiki

Expected: you are logged in on dewiki.
Actual: you are logged out on all three wikis.

All steps are necessary. If you load another page on meta or enwiki before visiting dewiki, you won't get logged out on that wiki.

Event Timeline

Tgr created this task.Jan 26 2016, 8:50 PM
Tgr raised the priority of this task from to Needs Triage.
Tgr updated the task description. (Show Details)
Tgr added a subscriber: Tgr.
Restricted Application added subscribers: StudiesWorld, Aklapper. · View Herald TranscriptJan 26 2016, 8:50 PM
Tgr renamed this task from SessionManager: unexpectedly logged out to SessionManager: unexpectedly logged out after visiting another wiki.Jan 26 2016, 8:51 PM
Tgr set Security to None.
Anomie added a subscriber: Anomie.Jan 26 2016, 9:25 PM

Can't reproduce with Firefox, CA's auto-login logs me in when I visit dewiki.

Tgr added a comment.Jan 26 2016, 9:34 PM



bd808 added a subscriber: bd808.Jan 26 2016, 9:39 PM

Similar but possibly different problem also from Incognito Chrome:

  • Login
  • Click alerts icon
  • Oops I'm logged out

Change 266610 had a related patch set uploaded (by Anomie):
Preserve certain keys when updating central session

https://gerrit.wikimedia.org/r/266610

Change 266610 merged by jenkins-bot:
Preserve certain keys when updating central session

https://gerrit.wikimedia.org/r/266610

Change 266672 had a related patch set uploaded (by Gergő Tisza):
Preserve certain keys when updating central session

https://gerrit.wikimedia.org/r/266672

Change 266672 merged by jenkins-bot:
Preserve certain keys when updating central session

https://gerrit.wikimedia.org/r/266672

Anomie closed this task as Resolved.Jan 27 2016, 5:22 PM
Anomie claimed this task.

After deploying the patch above to mw1017, the bug couldn't be reproduced. So let's call this closed.