hashar added a comment.

Yup, I think the flow goes like:

POST /index.php/Special:Preferences
user=User-0.8234
COOKIE: wikidb_session=0js640qarj8b7c710hboopll3d99jo9l

Several jobs get enqueued and one is left behind. That got triggered by a run of the mediawiki/core Selenium tests. The suite then close the browser entirely

In a new browser instance, the Echo suite is run and login as Wikiadmin:

POST /index.php/Special:UserLogin
user=Wikiadmin
COOKIE: wikidb_session=aj3k23nvas9kr06rc5tkvdjmfhhmcc3o

A delayed job from the mediawiki/core suite is run and triggers the setcookie for a previous and now invalid session.

The browser get the new (invalid) session, redirect to Main_Page and present the invalid session. Seems to be the jobs should never set a cookie to cover the case of them being run by a web request.


TASK DETAIL
https://phabricator.wikimedia.org/T191537

EMAIL PREFERENCES
https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: zeljkofilipin, hashar
Cc: gerritbot, Anomie, hashar, Jakob_WMDE, Addshore, Pablo-WMDE, WMDE-leszek, Aklapper, zeljkofilipin, Versusxo, Majesticalreaper22, Giuliamocci, Adrian1985, Cpaulf30, Lahi, Gq86, Baloch007, Darkminds3113, Bsandipan, Lordiis, GoranSMilovanovic, Maosef, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, QZanden, LawExplorer, Lewizho99, Maathavan, Debenben, Liudvikas, Luke081515, thcipriani, Wikidata-bugs, aude, fredw, Physikerwelt, Pkra, Darkdadaah, scfc, Mbch331, Jay8g, greg
_______________________________________________
Wikidata-bugs mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

Reply via email to