⌈⌋ branch:  freshcode

View Ticket

Ticket UUID: 3b95d10bdb030c5955e5a356d5c84dc8cca8575c
Title: Cannot sign out OpenID session.
Status: Closed Type: Incident
Severity: Severe Priority: Medium
Subsystem: Resolution: Overcome_By_Events
Last Modified: 2016-11-03 16:54:49
Version Found In: current
User Comments:
kazinator2 added on 2016-08-12 20:16:00:
[How do you recover passwords in this site? I reported this problem two years ago as "kazinator". Today I had to create a new account here, kazinator2]

The problem still persists. I cannot update the TXR project in Freshcode.

It says I cannot update it with my current login: it matches neither the password nor OpenID handle.

I click on login, and then log out.  It tells me I have successfully signed out.

I go to the project to try to update it again. Of course, I can't update it with my current login (because I don't have one). I click on the login link, and now there is an OpenID authentication dialog. When I enter the URL and proceed, it fails, telling me "Already Logged In": that I haven an association with an OpenID handle already.

So, in fact, I was not signed out when I was told I was signed out.

Clearing cookies does nothing; it's some persistent server-side state.

kazinator2 added on 2016-08-12 20:20:07:
I tried from a private Firefox window just now. Same results; the only difference was that I was actually directed through the OpenID provider to authenticate. After that I was told that I already have an OpenID session with a different URL.

(How can a newly instantiated FireFox private session have an existing login association with a site, unless it's tracked by IP address?)

mario added on 2016-11-03 16:54:49:

(The OpenID handle had been reset meanwhile.)

There's no IP association to a login. It's really just a session cookie.

However, since everything is running through CloudFlare, there may indeed be caching issues.