Steps to replicate the issue (include links if applicable):
- Be me
- Visit a Wikimedia site (but not any site, only some of them) and autologin via CentralAuth
- Wait a bit (maybe about 10 minutes?) without loading a page on that site
- Load/reload a page
I first noticed this on hewiki, but now it's happening on enwiki. I haven't noticed it on Commons.
What happens?:
You are centrally logged in as AntiCompositeNumber. Reload the page to apply your user settings.
Request ID: 0aaac960-379b-4860-a842-a6d6645fcc55
GET /wiki/Main_Page HTTP/2 Host: en.wikipedia.org User-Agent: *** Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br, zstd Referer: https://en.wikipedia.org/wiki/Special:Watchlist Connection: keep-alive Cookie: WMF-Last-Access=18-Mar-2025; WMF-Last-Access-Global=18-Mar-2025; enwikiUserName=AntiCompositeNumber; loginnotify_prevlogins=***; stopMobileRedirect=true; GeoIP=***; ss0-enwikiSession=***; ss0-centralauth_Session=***; enwikimwuser-sessionId=***; NetworkProbeLimit=0.001 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Sec-Fetch-User: ?1 Priority: u=0, i
HTTP/2 200
date: Tue, 18 Mar 2025 02:25:54 GMT
server: mw-web.eqiad.main-ccbc59845-wnp2h
x-content-type-options: nosniff
content-language: en
accept-ch:
vary: Accept-Encoding,Cookie,Authorization
expires: Thu, 01 Jan 1970 00:00:00 GMT
last-modified: Tue, 18 Mar 2025 02:09:01 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
age: 0
x-cache: cp1112 miss, cp1112 pass
x-cache-status: pass
server-timing: cache;desc="pass", host;desc="cp1112"
strict-transport-security: max-age=106384710; includeSubDomains; preload
report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
set-cookie: WMF-DP=19b;Path=/;HttpOnly;secure;Expires=Tue, 18 Mar 2025 00:00:00 GMT
x-client-ip: ***
cache-control: private, s-maxage=0, max-age=0, must-revalidate, no-transform
accept-ranges: bytes
X-Firefox-Spdy: h2The SUL dance with login.wikimedia.org and the various domains appears to work as intended. SUL3 does not appear to be involved, at least on the client side (CentralAuth requests have usesul3=0 and there are no requests to auth.wikimedia.org).
What should have happened instead?:
I should stay logged-in more than a few minutes.
Software version (on Special:Version page; skip for WMF-hosted wikis like Wikipedia):
Other information (browser name/version, screenshots, etc.):
