Page MenuHomePhabricator

App login state may be inconsistent with the site(s)
Closed, ResolvedPublic

Description

Our app login state may not reflect the actual login state in MediaWiki, which can cause unexpected behavior.

As an example, it's possible for this issue to result in echo notification queries failing. I think these steps will reproduce it:

  1. Log into the app while logged into the desktop site with the same account
  2. Log out of the desktop site and log in with another account
  3. Perform an action that should trigger a notification for the app user with the second account
  4. The next app request for notifications will fail with a login required error.

I think the result of this is that a user who logs out on the desktop site after logging into the app (and appearing to still be logged in) will erroneously not receive expected notifications.

Related Objects

Event Timeline

Mholloway renamed this task from App login state may be consistent with the site to App login state may be inconsistent with the site.Jan 6 2017, 10:32 PM
Mholloway updated the task description. (Show Details)
Mholloway updated the task description. (Show Details)
Mholloway renamed this task from App login state may be inconsistent with the site to App login state may be inconsistent with the site(s).Jan 6 2017, 10:35 PM
Mholloway updated the task description. (Show Details)
Dbrant claimed this task.
Dbrant subscribed.

Our internal logic will now re-login the user (silently) if we detect that they've been logged out.