#4710 id.fedoraproject.org login problems
Closed: Fixed None Opened 4 years ago by bcl.

= bug description =
The login experience with fedora.zanata.org is pretty frustrating:

Initial login takes me to id.fedoraproject.org, I select 7 days and accept. It hangs there about 95% of the time, never returning to zanata.

Manually visiting zanata afterwards sometimes results in a login. At other times it hangs with the browser saying 'waiting for id.fedoraproject.org'

When I do manage to complete a login sequence, I am never remembered for 7 days. After an hour or so I am again sent to id.fedoraproject.org to accept the login, select 7 days, etc.


Hi,

Thanks for the report.

I won't comment on the first part and will let Patrick do it as it might indeed be a bug.

Replying to [ticket:4710 bcl]:

When I do manage to complete a login sequence, I am never remembered for 7 days. After an hour or so I am again sent to id.fedoraproject.org to accept the login, select 7 days, etc.

Regarding this part thought, I think there is a mis-understanding.
The remember for 7 days does not mean: remember my login for 7 days, it means: remember for 7 days that I agree to share the information listed above (email, full name, nickname...) with this website (that is presented at the very top of the page).

The time-out in FedOAuth is of 15 minutes, so if you do not visit FedOAuth in more than 15 minutes, it will ask you to re-login, however, it should not ask you if you wish to share your information with fedora.zanata.org (in this case) for 7 days normally.

Thanks for the clarification. I just tried again, and it worked with only a prompt to login to FedOauth w/o the 7 day prompt (and it returned me back to zanata without delay). So maybe that bit is working as designed.

Is there a way to change the timeout? 15 minutes is really short. I'd think an hour or two would be better for most people.

Hi,

As pingou said: thanks for the report.

This ticket consists of several parts actually:

Replying to [ticket:4710 bcl]:

Initial login takes me to id.fedoraproject.org, I select 7 days and accept. It hangs there about 95% of the time, never returning to zanata.

For this part, could you try logging in to https://apps.fedoraproject.org/calendar to verify this is caused by id.fedoraproject.org?

Manually visiting zanata afterwards sometimes results in a login. At other times it hangs with the browser saying 'waiting for id.fedoraproject.org'

The login system at Zanata itself seems to be not responding correctly, I'm currently looking with them to see where the problem with staying logged in is.

When I do manage to complete a login sequence, I am never remembered for 7 days. After an hour or so I am again sent to id.fedoraproject.org to accept the login, select 7 days, etc.

This part pingou already explained, sorry for the confusion there.

Regarding the timeout for logging out: we are currently working on a system where once you log out anywhere, you log out everywhere.
As soon as that code lands, we will increase the timeout.

The reason for that is that we don't want to make people unable to logout when they leave the computer and have other people use their account (people will likely forget to log out from both the services they're using and id.fedoraproject.org).

Replying to [comment:4 puiterwijk]:

Hi,

As pingou said: thanks for the report.

This ticket consists of several parts actually:

Replying to [ticket:4710 bcl]:

Initial login takes me to id.fedoraproject.org, I select 7 days and accept. It hangs there about 95% of the time, never returning to zanata.

For this part, could you try logging in to https://apps.fedoraproject.org/calendar to verify this is caused by id.fedoraproject.org?

I'll give that a try the next time I see it. Everything is working this morning :)

Manually visiting zanata afterwards sometimes results in a login. At other times it hangs with the browser saying 'waiting for id.fedoraproject.org'

The login system at Zanata itself seems to be not responding correctly, I'm currently looking with them to see where the problem with staying logged in is.

Thanks.

When I do manage to complete a login sequence, I am never remembered for 7 days. After an hour or so I am again sent to id.fedoraproject.org to accept the login, select 7 days, etc.

This part pingou already explained, sorry for the confusion there.

Regarding the timeout for logging out: we are currently working on a system where once you log out anywhere, you log out everywhere.
As soon as that code lands, we will increase the timeout.

The reason for that is that we don't want to make people unable to logout when they leave the computer and have other people use their account (people will likely forget to log out from both the services they're using and id.fedoraproject.org).

That sounds reasonable, thanks for the update.

Still seeing this on the majority of login attempts to fedora.zanata.org, this time I also tried logging into apps and that completed in about 30 seconds. After doing that I was then able to login to zanata without any other prompts.

When it was hanging the browser was saying 'waiting for id.fedoraproject.org' FWIW.

Can you see if things are better now?

We solved one possible issue that may have been making it slow...

Today's attempt worked quickly and smoothly. Hopefully it will continue :)

Excellent. Please re-open if you see issues return.

Login to comment on this ticket.

Metadata