Thanks, Alessandro. That makes sense, although I'm not sure it exactly matches the behavior. Since a private window works, it does seem cookie-related. On the other hand one user was able to log in during testing, but then later was not. He said it was the same browser on the same computer. Since I can't duplicate the problem, it's very hard to diagnose. I wound up pointing Apache at our Central Authentication Service (CAS), and skipping the Turbogears authentication entirely. That at least has the advantage of two-factor authentication.
Best, Matthew On Thu, Feb 13, 2020 at 4:02 AM Alessandro Molina < alessandro.mol...@gmail.com> wrote: > Upgrading from Python2 to Python3 changes the way the cookie signatures > are generated if I remember correctly. > So authentication tokens created on PY2 don't work on PY3 and the user > will have to reach to /logout_handler to delete the old cookie and enable > the new one (or clear cookies). > > That might be the problem you are facing. > > > > On Wed, Feb 5, 2020 at 3:03 AM MHCPU <matthew.c...@gmail.com> wrote: > >> "Private" or "incognito" browser window or tab, that is. >> >> Matthew >> >> -- >> You received this message because you are subscribed to the Google Groups >> "TurboGears" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to turbogears+unsubscr...@googlegroups.com. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/turbogears/d90385a7-3293-40ee-9d2b-93b671e1c3ec%40googlegroups.com >> <https://groups.google.com/d/msgid/turbogears/d90385a7-3293-40ee-9d2b-93b671e1c3ec%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- > You received this message because you are subscribed to the Google Groups > "TurboGears" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to turbogears+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/turbogears/CAJfq2JEZutqTFT5ejJETkPFomMNkYpmMC77Vyz7T6tTgojaSZw%40mail.gmail.com > <https://groups.google.com/d/msgid/turbogears/CAJfq2JEZutqTFT5ejJETkPFomMNkYpmMC77Vyz7T6tTgojaSZw%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "TurboGears" group. To unsubscribe from this group and stop receiving emails from it, send an email to turbogears+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/turbogears/CACcPiD21Wh1tUytfba38EEpQ2LiK663n%3DrDiqJJ7w2RNrvmKkg%40mail.gmail.com.
