Page MenuHomePhabricator

Loging into Phabricator with MediaWiki account on mobile device can cause endless loop
Closed, ResolvedPublic


Steps to reproduce:

  1. Open a browser on a mobile device or manipulate your desktop browser to load the mobile version of Wikipedia.
  2. Make sure you are neither logged into Phabricator nor into your global Wikimedia account.
  3. Go to Wikipedia, log into your global Wikimedia account.
  4. Go to Phabricator, log in using your MediaWiki account.

Expected result: You are sent the, logged in automatically (since your are logged in on Wikipedia), and asked to allow logging in Phabricator using OAuth.

Actual result: Special:Login is loaded and reloaded in an endless loop.

When you visit before, it works as expected. In the desktop version it too works as expected, so it seems to be caused by some unfortunate combination of OAuth, SUL, and the mobile version.

I tested this both with Firefox on an actual mobile device, and with desktop Vivaldi with user agent set to Firefox/Android.

Event Timeline

Can't reproduce. Can you make the steps more exact (open a browser in incognito mode, visit URL X, log in, visit URL Y...)?

SamanthaNguyen renamed this task from Loging into Phabricator with MediaWiki account on mobile device can caus endless loop to Loging into Phabricator with MediaWiki account on mobile device can cause endless loop.Sep 21 2016, 3:19 AM
SamanthaNguyen added a subscriber: SamanthaNguyen.

Long version:

  1. Open Firefox on desktop, install the add-on "User Agent Switcher", restart your browser to activate it, set your user agent to "iPhone 3.0", open a "private mode" window.
  2. Go to You should be redirected to
  3. Click the hamburger icon, select "Anmelden". You should go to
  4. Enter your name and password and log in. You should return to, now logged in.
  5. Enter "phab:" in the search bar, press enter. You should go to
  6. Click on the log-in icon, you should go to
  7. Click the "MediaWiki" button.

Result: The page is loaded in an endless loop (of course the hex numbers are different). The page shows you as not logged in.

According to the web console the load order is the following:

  1. -> 302 Found
  2. -> 200 OK
  3. Calls to some resource loader modules.
  4. A call to -> 302 Found
  5. -> 302 Found
  6. -> 302 Found
  7. -> 302 Found
  8. -> 302 Found
  9. -> 200 OK

At this point the loop starts again.

Jdlrobson added a subscriber: Jdlrobson.

After research, if you find this is specific to the MobileFrontend extension, please re-add MobileFrontend, (it shouldn't be).

Tgr triaged this task as High priority.Mar 7 2017, 3:45 AM
mmodell added a subscriber: mmodell.

This is apparently not actually a phabricator bug.

I've tested just now with my phone and I can log me into phabricator. @Schnark, can you re-check to see if this task was solved by T119343: OAuth login for phabricator impossible on MobileFrontend ?

Schnark claimed this task.

I, too, can confirm that logging into Phabricator now works as expected.

Tgr changed the task status from Duplicate to Resolved.Feb 13 2018, 7:53 PM

Removing duplicate loop.