Page MenuHomePhabricator

Wikipedia keeps logging me out immediately
Closed, ResolvedPublic

Description

I clicked "log out" accidentally and wanted to interrupt it. The page Special:UserLogout wasn't finished loading in my browser, but I was still logged out. Now every time I try to log in I get logged out immediately (servers are sending header to delete cookies). This issue persists in different browsers (I've tried Firefox, Chrome), but I don't have the same problem if I try another account. Account having problem is Drundia.

Cookies are ordered to be deleted by one of several requests:
https://en.wikipedia.org/wiki/Special:CentralLogin/complete?token=*** (it displays error "No active login attempt is in progress for your session.")
https://en.wikipedia.org/wiki/Main_Page (or another normal WP page, in this case the page itself displays me as anon)
https://login.wikimedia.org/wiki/Special:CentralAutoLogin/refreshCookies?type=1x1&wikiid=enwiki&proto=https
https://login.wikimedia.org/wiki/Special:CentralAutoLogin/checkLoggedIn?wikiid=metawiki&proto=https&type=1x1&from=enwiki

Response headers involved:
x-centralauth-status: Not logged in
Set-Cookie: loginwikiSession=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; httponly
loginwikiUserID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; httponly
forceHTTPS=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; httponly
centralauth_User=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; httponly
centralauth_Session=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; httponly

I can assume that during my logout some background task to wipe my auth tokens was started, but it wasn't properly stopped as it should have been (because of user abort?).

Event Timeline

Catalan triaged this task as High priority.EditedJun 29 2017, 9:24 PM
Catalan subscribed.

High priority as bug with one of MediaWiki's essential actions.

I've noticed the same issue recently too - I'm currently taking a mini-vacation break from Wikimedia Foundation projects, and I accidentally logged myself out when I started my break. I wanted to keep myself logged in even during the break just in case I was needed in an emergency, but now I can't log back in. When my break is up, I may not be able to re-login and contribute.

After reading T169261 I've tried to reset my password (it was indeed very old) and my issue has been resolved. However, users without provided email address won't be able to use this feature.

Trizek-WMF raised the priority of this task from High to Unbreak Now!.Jul 18 2017, 10:20 AM
Trizek-WMF subscribed.

I have noticed two reports about this problem on French Wikipedia.

We have at least 5 reports. How many people haven't reported this issue? I think this problem should be Unbreaked Now.

There is a report at it.wp as well, but no additional details from user yet.

For anyone affected by this problem who wants to help track it down, I'm going to code a list of things to try (and potentially report back):

In T169261#3452695, Anomie wrote:

Authentication bugs are notorious for having similar symptoms with different causes, since the symptom is usually "I can't log in" or "I get logged out unexpectedly" and there are many things that can cause that, including actual MediaWiki bugs like this one, browser bugs like T151770, mysteriously-corrupted cookies that never get enough information to be investigated, and user error such as blocking first- and/or third-party cookies from our sites. And then people tend to assume their problem is the same as someone else's.

Which is why we usually wind up asking people with authentication problems to try several things:

  • Report exactly what happens, since "login submits successfully but I'm not logged in", "I'm logged in for the first page-view but logged out when I click any link", "'a loss of session data' when trying to log in", and so on all point to different causes. The last can even point to different things depending on when exactly in the process it occurs.
  • Clear all cookes and try again, to see if it's screwed-up cookies.
  • Log in using a different browser/device, to see if it's something screwed up in the browser.
  • Log in to a different account, perhaps even a newly-created account, to see if it's something wrong with the original account.
  • Capture the HTTP requests and responses so we can look for subtle signs of how exactly things are failing.

[...]

  • Assuming "Manuela bertola" is the user name in T168858#3451751, that does look like an instance of T169261 too.

No more reports since 19 July... is this still UBN? Per Anomie's comment quoted above, it's possible that this may have been fixed by virtue of fixing T169261.

greg lowered the priority of this task from Unbreak Now! to Medium.Aug 9 2017, 3:23 PM

No longer UBN definitely, thanks @TTO .

I'm leaning towards closing...

Closing as per last two comments.
Please reopen (with info on time, wiki, and user account) if/when this happens again.