https://bugzilla.wikimedia.org/show_bug.cgi?id=69834

--- Comment #7 from Chris Steipp <[email protected]> ---
So the cause is Idd9325374cb5dc13c4c057f45f88a33bdff523a9, and this code:


// In the case where the user is already logged in, do not show the login page.
// The use case scenario for this is when a user opens a large number of tabs,
is
// redirected to the login page on all of them, and then logs in on one,
expecting
// all the others to work properly.
if ( $this->mType !== 'signup' && !$this->mPosted &&
$this->getUser()->isLoggedIn() ) {
    $this->successfulLogin();
}

CentralAuth hooks UserLoginComplete from successfulLogin, which redirects
through loginwiki's Special:CentralLogin/start and /complete.

I think the exception is happening because it tries to get the username out of
$_SESSION, but since the user logged in a while ago, and

> echo ini_get( 'session.gc_maxlifetime' );
1440

we only keep sessions around server side for 24 minutes, the username from
$_SESSION is probably null, so the exception is triggered.

Tyler, can you explain the use case you put in that comment? I'm not sure I
follow why that is needed. We can probably flag CentralAuth not to redirect if
we have to, but I'm trying to understand the whole picture.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to