The title is misleading; it should probably be "Session recycling stalls
during login".
I also noticed that logout stalls.
On Saturday, February 27, 2016 at 3:12:08 PM UTC-5, Stodge wrote:
>
> I'm trying to diagnose a problem where noone can login to my django site.
> The login attempt times out as NGINX (proxy) gives up waiting for Apache to
> respond. There are no errors in the logs anywhere. I copied the Django code
> into my app to debug:
>
> def this_real_login(request, user):
>> """
>> Persist a user id and a backend in the request. This way a user
>> doesn't
>> have to reauthenticate on every request. Note that data set during
>> the anonymous session is retained when the user logs in.
>> """
>> if user is None:
>> user = request.user
>> # TODO: It would be nice to support different login methods, like
>> signed cookies.
>> if SESSION_KEY in request.session:
>> if request.session[SESSION_KEY] != user.pk:
>> # To avoid reusing another user's session, create a new, empty
>> # session if the existing session corresponds to a different
>> # authenticated user.
>> print("DEBUG: Flushing session")
>> request.session.flush()
>> print("DEBUG: Flushed session")
>> else:
>> print("DEBUG: Cycling session")
>> request.session.cycle_key()
>> print("DEBUG: Cycled session")
>> request.session[SESSION_KEY] = user.pk
>> request.session[BACKEND_SESSION_KEY] = user.backend
>> if hasattr(request, 'user'):
>> request.user = user
>> print("DEBUG: Rotating token")
>> rotate_token(request)
>> print("DEBUG: Rotated token")
>
>
> It appears to stall inside:
>
> request.session.cycle_key()
>
> Does anyone have any ideas why this might be? I'm scouring this code but I
> can't see anything amiss.
>
> Thanks
>
>
--
You received this message because you are subscribed to the Google Groups
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-users/7bbc36dd-b467-4390-bf4a-4847896ebb6b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
