Page MenuHomePhabricator

Can't log in without logging out
Closed, ResolvedPublic

Description

Author: misza

Description:
Steps to replicate problem (you need two accounts):

  1. Log in with account #1
  2. Visit Special:Userlogin again but *without logging out first*
  3. Log in with account #2
  4. The site will tell you that you that you have successfully logged in as account #2, but...
  5. [the problem] ...after visiting another page (any page) the interface again says you're account #1 (likewise on other wikis).

Version: unspecified
Severity: normal
URL: http://en.wikipedia.org/wiki/Special:Userlogin

Details

Reference
bz14447

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 10:10 PM
bzimport set Reference to bz14447.
bzimport added a subscriber: Unknown Object (MLST).

misza wrote:

Small update: this only seems to happen when acc. #1 is global while #2 is only local.

This bug is extremely annoying.

Apparently, in CentralAuthHooks.php, function onUserLoginComplete the block

		if (!$centralUser->exists() || !$centralUser->isAttached()) {
			return true;
		}

should nuke global session cookies instead of simply returning.