Steps to reproduce (probably non-deterministic):
log in and open https://www.wikidata.org/ and https://commons.wikimedia.org/ in two browser tabs. When you refresh one, your session is lost in the other (when you refresh there as well, you get an anonymous initial pageview and then the "You are centrally logged in..." notice when CentralAuth autologin kicks in).

Error

mwversion: 1.39.0-wmf.13
reqId: 10a8f702-0bbd-4e1b-bf6f-64b70628bf00
Find reqId in Logstash

normalized_message

Session "{session}": Metadata merge failed: {exception}

exception.trace

from /srv/mediawiki/php-1.39.0-wmf.13/includes/session/SessionProvider.php(331)
#0 /srv/mediawiki/php-1.39.0-wmf.13/includes/session/SessionManager.php(688): MediaWiki\Session\SessionProvider->mergeMetadata(array, array)
#1 /srv/mediawiki/php-1.39.0-wmf.13/includes/session/SessionManager.php(547): MediaWiki\Session\SessionManager->loadSessionInfoFromStore(MediaWiki\Session\SessionInfo, WebRequest, boolean)
#2 /srv/mediawiki/php-1.39.0-wmf.13/includes/session/SessionManager.php(248): MediaWiki\Session\SessionManager->getSessionInfoForRequest(WebRequest)
#3 /srv/mediawiki/php-1.39.0-wmf.13/includes/WebRequest.php(842): MediaWiki\Session\SessionManager->getSessionForRequest(WebRequest)
#4 /srv/mediawiki/php-1.39.0-wmf.13/includes/session/SessionManager.php(169): WebRequest->getSession()
#5 /srv/mediawiki/php-1.39.0-wmf.13/includes/Setup.php(437): MediaWiki\Session\SessionManager::getGlobalSession()
#6 /srv/mediawiki/php-1.39.0-wmf.13/includes/WebStart.php(86): require_once(string)
#7 /srv/mediawiki/php-1.39.0-wmf.13/api.php(43): require(string)
#8 /srv/mediawiki/w/api.php(3): require(string)
#9 {main}

Details

Risk Rating: Low
Author Affiliation: Wikimedia Communities

Related Objects

Mentioned In: T299193: MediaWiki login failure due to race condition with session cookie
Mentioned Here: T309616: Cross-wiki session loss on Wikimedia wikis

Event Timeline

Minorax created this task.May 31 2022, 1:17 PM

Restricted Application added a subscriber: • Aklapper. · View Herald TranscriptMay 31 2022, 1:17 PM

Minorax updated the task description. (Show Details)May 31 2022, 1:18 PM

Hi, which exact website is "Wikimedia"? Which browser(s) and versions have been tested? Does that also happen in safe mode?
Please follow https://www.mediawiki.org/wiki/Manual:How_to_debug/Login_problems - thanks!

It happens on Wikimedia sites such as en.wp, meta. I'm using Chrome. Doesn't seem to be script issues as it only happen today.

There seem to be many (?) session-related log entries for your account on logstash, but unfortunately I'm not quite sure how to interpret them. Several entries seem to indicate that there's an error in handling the session data (e.g. this one), but I'm not sure if it's related. Tagging MediaWiki-Core-AuthManager so that people more familiar with Session(|Provider|Backend) can more easily find this task.

Minorax added a comment.May 31 2022, 2:05 PM

This comment was removed by Minorax.

Minorax merged a task: T309616: Cross-wiki session loss on Wikimedia wikis.May 31 2022, 2:06 PM

Minorax added a subscriber: Tgr.

TheresNoTime updated the task description. (Show Details)May 31 2022, 2:09 PM