FYI, clearing cookies didn't work. 😒🍪

I tried all, but it only seems to affect Wikimedia Commons, look:

As a reference, sign in URL's look like this (3 examples for diagnostics):

https://commons.m.wikimedia.org/w/index.php?title=Special:UserLogin&returnto=Category:Chinese_numismatic_charms&returntoquery=article_action%3Dwatch

https://commons.m.wikimedia.org/w/index.php?title=Special:UserLogin&returnto=User%3ADonald_Trung%2FThe_FORVM_Library_of_Ancient_Coinage_PD-books_import_list&warning=mobile-frontend-watchlist-purpose&campaign=mobile_watchPageActionCta&returntoquery=article_action%3Dwatch

https://commons.m.wikimedia.org/w/index.php?title=Special:UserLogin&returnto=Commons%3AVillage_pump%2FCopyright&returntoquery=action%3Dedit%26section%3D0&warning=mobile-frontend-edit-login-action

I just experimented with fake sign in names like "Donald Trunk" and "Donald Trungy" and on Wikimedia Commons in the mobile browser I keep getting the exact same comment while on the English Wikipedia the sign in interface (on mobile 📱) tells me that there's an invalid username or password, it seems odd that the mobile sign in interface of only, and I mean ONLG Wikimedia Commons can't recognise this.

@Aklapper Can an administrator look into my account to see if any cookies or something is broken? Here is the full log of my sign in attempts on Commonsmobile.

I first attempt to sign in from the Commonwiki UploadWizard on my wife's LG K10 (2017) cell.-phone to upload a few images I took as my camera on my Microsoft Lumia 950 XL is broken, in order to sign in I use the Ecosia browser... This failed, I got an error message that no active login attempt is happening at my session.

I then <strike>try</strike> tried to use Google Chrome on the same device (LG K10 (2017)) to no avail.

A day later I try to sign in on my Microsoft Lumia 950 XL phablet on mobile to import some PD books 📚, I get the error message attached above, I then go to desktop mode to see if anything is wrong 👎🏻 and to sign in from there, to my surprise I'm still signed in, from this point forward I must've tried a hundred times or so with different combinations to see if I could sign in, I cleared all cookies, I factory reset my wife's phone 📞 (she really wasn't all to happy about that), I installed a different browser, none of that worked.

I thought that maybe my IP address was causing me to not sign in so I tried signing in on a different IP address using the same Microsoft Lumia 950 XL phablet, I still got the same error message, then I tried it around 5 different IP's from various providers at neighbours and friends and at the school where I teach, still no sign in.

Then I tried about using "a virgin computer 💻" (or in other words a computer where I have never signed in with the account User:Donald Trung or any other WMF account as far as I know, I don't really ask my friends if they have WMF accounts), after trying I still couldn't sign into Commonswikimobile.

So from what I can tell about this issue:

(1) It affects all devices where "User:Donald Trung" tries to sign in and then all subsequent accounts (real or fake).

(2) It affects all IP addresses.

(3) It affects all browsers.

(4) It affects all device types (e.g. Laptop, desktop, smartphone, phablet, Etc.).

Does your browser allow capturing the relevant HTTP requests and responses?

@Aklapper, not on my Microsoft Lumia 950 XL, I will try it on my wife's LG K10 (2017) later when I'm home 🏠 again. Microsoft Windows 10 Mobile 📱 tends to have a very closed down system and often when attempting to report diagnostics I am forced to try and make a report only using the Microsoft Windows Feedback app, I will try to see if I could export one of those files 📁 to the Phabricator.

@Aklapper, others seem to be suffering from this situation too, please see:

https://commons.wikimedia.org/wiki/Commons:Help_desk#Log-in

This issue seems to be exclusive to Wikimedia Commons, could you please personally try to see if this example page:

https://commons.m.wikimedia.org/w/index.php?title=File:De_Reiselexikon_(Schramm)_2_373.jpg&mobileaction=toggle_view_mobile

Works with your Wikimedia (SUL-)account? Otherwise this might be an issue that affects some users but not others.

For the record, I can edit the Mobile version anonymously, but when I try to log in, I am automatically redirected to the Desktop version.

I also face this issue. I initially faced this when trying to login into the mobile meta website. I am unable to login to the mobile website of commons, either.

Trying to answer the question in the troubleshooting page,

Does it persist after clearing cookies for the wiki domain?

Yes.

When logging in in incognito mode?

Yes.

When logging in with a different kind of browser?

Yes! I tried logging in using Firefox Nightly 63.0a1 on an Android and Debian, Chromium 66.0.3359.117 on an Android and Debian, Chrome (version not known) on an Android Firefox Developer Edition 58.0b11 on a Debian.

Does it affect all user accounts, or just one?

It does seem to be affecting multiple accounts. I have two accounts and face the same issue in both. Further, there's another one (the one who started this task).

Does the "remember me" flag make any difference? (Clear cookies before attempts.)"

Nope.

If the problems are happening on a WikiMedia wiki, try logging in on another wiki, preferably one that does not share a second-level domain name (so if the problem happens on xy.wikipedia.org, try for example xy.wiktionary.org)

I am able to login to en.m.wikipedia.org and ta.m.wikipedia.org but unable to login to commons.m.wikimedia.org or meta.m.wikimedia.org

Capture the relevant HTTP requests and responses (i.e. visiting the login page + submitting the login form + the resulting redirect;

I saved the requests and responses as HAR files. I'm not sharing it yet as I'm not which data I should sanitize out. I'll be ready to share it if given guidance about how to sanitize/share it.

Change 444464 had a related patch set uploaded (by Anomie; owner: Anomie):
[mediawiki/core@master] WebReponse: Use values altered in 'WebResponseSetCookie' hook

https://gerrit.wikimedia.org/r/444464

rMW23706be35c03: Disable WebResponse setters for post-send processing broke the WebResponseSetCookie hook's ability to alter the cookie being set, which broke the mobile hack for T49647: meta.m.wikimedia.org user login doesn't work, so it was trying to set the CentralAuth cookies with domain=commons.wikimedia.org instead of domain=commons.m.wikimedia.org.

"Maybe this is irrelevant, maybe this is the cause, but as I saw that you wish to fix this bug, with me this bug first started I think two weeks ago and during that time I received a message from Tech News that no new build will be rolled out that week, I'm not sure if we're on the same build of the MediaWiki software as we were two (2) weeks ago, could it maybe be true that this problem is exclusive to this build? And if possible, could you compare the cookies between the (particularly mobile) features of the current build and the preceding build? For the record as far as I know this only affects commons.m.Wikimedia.org, as you can see I'm editing "on mobile" on the English Wikipedia (URL string: https://en.m.wikipedia.org/w/index.php?title=User_talk:Anomie#/editor/new) here without any logging issues, so maybe you could also compare the cookies of both wiki's. --[[User:Donald Trung|Donald Trung]] ([[User talk:Donald Trung|talk]]) 19:47, 8 July 2018 (UTC)
 
+
: This talk page is not a good place for this. It belongs "

Copied this from https://en.wikipedia.org/w/index.php?title=User_talk:Anomie&diff=next&oldid=849406958

See https://www.mediawiki.org/wiki/MediaWiki_1.32/Roadmap and https://wikitech.wikimedia.org/wiki/Deployments for general info.
I don't understand why it matters if it's exclusive to this build, or whose 'cookies' to compare as only you have your cookies on your computer...

User:GerifalteDelSabana seems to suffer from it too, please see:

https://commons.wikimedia.org/w/index.php?title=Commons:Help_desk&oldid=310782306#Mobile_login_error

So this issue keeps affecting more users as time progresses.

Change 444464 merged by jenkins-bot:
[mediawiki/core@master] WebReponse: Use values altered in 'WebResponseSetCookie' hook

https://gerrit.wikimedia.org/r/444464

If I wasn't going to be flying all day Monday, I would backport and deploy this. I'm honestly tempted to deploy it today even though it's Friday. @phuedx, anyone from your team want to SWAT deploy this on Monday?

Change 445957 had a related patch set uploaded (by Phuedx; owner: Anomie):
[mediawiki/core@wmf/1.32.0-wmf.12] WebReponse: Use values altered in 'WebResponseSetCookie' hook

https://gerrit.wikimedia.org/r/445957

I've scheduled ☝️ for deployment during today's European Mid-day SWAT deployment.

Change 445957 merged by jenkins-bot:
[mediawiki/core@wmf/1.32.0-wmf.12] WebReponse: Use values altered in 'WebResponseSetCookie' hook

https://gerrit.wikimedia.org/r/445957

Mentioned in SAL (#wikimedia-operations) [2018-07-16T11:36:43Z] <pmiazga@deploy1001> Synchronized php-1.32.0-wmf.12/includes/WebResponse.php: SWAT: [[gerrit:445957|WebReponse: Use values altered in WebResponseSetCookie hook (T198525)]] (duration: 00m 54s)

Thanks to @pmiazga for deploying the change in my (unexpected!) absence.

I can now login to https://commons.m.wikimedia.org and when I do I see the CentralAuth cookies being set with a domain of commons.m.wikimedia.org 👍

Confirmed that this is fixed. Thanks @Anomie, @phuedx, and @pmiazga !

Change 615875 had a related patch set uploaded (by Reedy; owner: Anomie):
[mediawiki/core@REL1_31] WebReponse: Use values altered in 'WebResponseSetCookie' hook

https://gerrit.wikimedia.org/r/615875

Change 615875 merged by jenkins-bot:
[mediawiki/core@REL1_31] WebReponse: Use values altered in 'WebResponseSetCookie' hook

https://gerrit.wikimedia.org/r/615875