type=mediawiki
level=WARNING
channel=session
Session "{session}": Metadata has an anonymous user, but a non-anon user was providedAbout 1,200 hits in the last 24 hours:
https://logstash.wikimedia.org/goto/02d3891d4a7de1488e28ef1e0314c598
Seems to be coming from both /w/api.php and /w/index.php.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| session: Improve text and documentation of SessionManager warnings | mediawiki/core | master | +23 -13 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T348206 Improve logging, monitoring and test coverage for MediaWiki Platform team authentication extensions | |||
| Open | PRODUCTION ERROR | None | T181869 Error "Session {session}: Metadata has an anonymous user, but a non-anon user was provided" |
It's a session security check. If the session itself is for an anonymous user but the cookies (or whatever) are for a logged-in user, that mismatch prevents use of the session. Chances are these are related to case #1 described at T158365#3036725, and the solutions there would apply here too.
There's no particular evidence of that. I believe that this log message would result in the user being served a new session cookie, and thus would not be the cause of T181876.
Change 1006177 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):
[mediawiki/core@master] session: Improve text and documentation of SessionManager warnings
Change 1006177 merged by jenkins-bot:
[mediawiki/core@master] session: Improve text and documentation of SessionManager warnings
Improved the inline docs a little. (Note that the message changed, it is now Session "{session}": the session store entry is for an anonymous user, but the session metadata indicates a non-anonynmous user.) I have two hypotheses of what could be happening:
We should probably figure this out later, but it's more a peculiarity than a problem so not a priority.