Page MenuHomePhabricator

After login, user not logged in when "prefershttps" set to false and "wgSecureLogin" set to true
Open, Needs TriagePublic

Description

I have enabled these settings to allow the wiki to be used over an insecure connection, but require https for login
$wgSecureLogin = true;
$wgDefaultUserOptions['prefershttps'] = false;

Unfortunately the user is not logged in when after finishing the login page if the came from an http page. They are properly logged in if they come from an https page and try to log in.

This is on the latest mediawiki 1.27.1

Event Timeline

Aklapper renamed this task from User is not logged in when perfershttps is set to false to After login, user not logged in when "prefershttps" set to false and "wgSecureLogin" set to true.Nov 4 2016, 10:31 AM