Kbin's "Log in" bug is discouraging me from participating

ernest, 10 months ago

Ok, so in the next few days, I'll be testing some things. It might be a bit worse for a while, but it will definitely speed up the problem-solving process. I'll be grateful for any feedback. I'm unable to reproduce it in local/testing environments, so it might be an issue with the cluster.

HotDogFingies, 9 months ago

I really appreciate how proactive you are. Thank you for your hard work.

adonis, 10 months ago

Is there anything we can help with? provide logs, repeat steps, etc?

tqgibtngo, 10 months ago

Apparently, the error condition might NOT be dependent on idle time (a period of time without any interaction). — Evidence: Periodic clicks on a vote button, scripted at 45-second intervals, did not prevent the error's eventual occurrence.

livus, 10 months ago

Pretty sure that for me it only happens if I'm reading a page without interacting for a while.

Then any interaction, like upvote, is error, but refreshing the original page fixes it.

(Firefox on android)

e569668, 10 months ago

This is anecdotal, but I don't experience these log outs on fedia (I have to relog like once every few days but that doesn't bother me, I assumed it was cookie expiry but maybe it has to do with server restarts or something). So I can understand if it happens more often to kbin social users it might be some other way it's set up like caching or something that others might not be running. Then again, without version info, it makes it a bit tough to debug so this might not be helpful, fedia could be running some random sha atm which might be the reason.

Echolot, 9 months ago

If I had to guess it’s probably the stickiness of the session (which user is assigned to which server on the cluster) that expires after a certain time which leads to needing a new login or in the case of the error page a CSRF token which isn’t valid on this server of the cluster.

DrNeurohax, 10 months ago

I'm not sure if it helps, but I wonder if this is linked to the inactivity error.

Load up any kbin thread or main page, open a new browser tab in the foreground, me around in the non-kbin tab for 15-30 minutes, and return to the kbin tab. Now any clicks on 'actions' (voting, posting, basically sending info to the server) sends you to an error page. Whatever info you were sending doesn't register (vote count or highlight, posts don't show up, etc.

I didn't have any logout problems at all until maybe a week ago. Since then I've been logged out 5+ times.

Not a big problem for me, but I could see it annoying others.

fearout, 10 months ago

Same. I’ve only ever seen this error after some time of inactivity, and reloading the page always helps.

Sabata11792, 10 months ago

I've seen the same. Leaving an app or browser tab open for a while, then interacting, seems to cause it.

Teppic, 10 months ago

Slightly annoyingly spending 10min drafting a comment seems to cause the same on occasion. (I guess there is no activity outside the edit box).
Fortunately if I get an error after posting, usually going back means the text is still there, then it's usually copy the text, click through to the profile of the person I was replying to and post the comment from that page. So far that almost always works.

Weirdly I don't seem to get logged out, just randomly directed to a error page when interacting (e.g. upvoting or trying to comment).

Edit: I don't think I can reliably recreate this issue...

Nepenthe, 10 months ago (edited 10 months ago)

I've developed a habit of copying everything I write before I hit send, because my comments tend to take a long time for me to write/format to my liking. Not because I keep losing it, but just in case.

Usually when it times out in the comments, I get brought to a page containing my lone comment box and a notification about "something-something, this page is federated, click here to return to the comments section."

So I wonder if it's really related in part to the page's continually updating federation making whatever you're trying to interact with obsolete. Though that doesn't make as much sense to me on our timelines as it does in a comment section :/

I've only had to dig around in someone else's profile twice, and that was because the notification's link to whatever reply you're trying to check doesn't seem to be mixing with numbered forum pages. By the time I check my replies, they're usually on a different page than I'm being linked to.

I don't think this has to do away with the numbering, it would just require a different method of linking (right?). But it IS one of the finer annoyances, and that I usually consent to scan/reread the entire thread looking for my avvie speaks to how stubborn I am.

Lippy, 10 months ago

I've had a similar experience. Only thing I can add is that more rarely even refreshing the page doesn't resolve running into an error page when voting on some comments. However, each time I was able to visit the user's profile and vote from there without issue.

e569668, 10 months ago

You might've already seen this, but just in case other people missed it since not everyone may follow ernest or check the microblog tab, he listed his current priorities here https://kbin.social/m/kbinMeta/p/1002621/Hi-in-this-and-probably-the-next-week-I-will so hopefully people won't have to deal with this too much longer 🤞

10A, 10 months ago

I've found that if you open up a bunch of kbin tabs, it helps to refresh each one immediately before interacting with it. I'm guessing there's some token that expires far too easily.

Tetra, 10 months ago

That does (usually) work yeah, but for example if I'm simply scrolling down I can't do that, since refreshing will bring me all the way back up and change what posts are even displayed.

1chemistdown, 10 months ago

This isn’t speaking towards the login issue we all experience, but as far as reentering your password, you should have a password manager that you use. That should enter the password easily with minimal effort from you.

Tetra, 10 months ago

Yeah I need to look into that, I just use Firefox's on desktop, but I don't have it on mobile; I'm assuming there's a way to link them together. It just hadn't really been an issue until now.

I_Miss_Daniel, 10 months ago

Yes. Firefox has its own sync feature. It's fairly robust.

1chemistdown, 10 months ago

It’s worth getting a good one, not that I’m not a fan of Firefox, but the stand alone ones work really well these days. Everyone has their favorite, I’m currently using 1password because I get the family version for free from another service; but I’ve used most of them and they’re all pretty similar.

Very_Bad_Janet, 9 months ago

What service gives you 1password for free?

1chemistdown, 9 months ago

I have a router based service that blocks ads and has a bunch of security features. Part of the service, is a subscription to 1password and a vpn service. I happily use 1password and I buy my own vpn. They just switched vpn providers so I need to look them up, but I will still keep my current vpn since it’s tied to email and a bunch of services.

10A, 10 months ago

A good password manager does far more than Firefox's built-in. Among the many things it does is sync across devices. Personally I like Bitwarden a lot, and there are several others out there that are good too.

I_Miss_Daniel, 10 months ago

Possibly related. For the last few weeks I've not been able to use kbin on Chrome on Android. Each time I try to log in I get "Invalid CSRF token."

Never a problem in Firefox on Android though.

elgordio, 10 months ago

How are you managing sessions and load balancing your cluster? From my experience this ‘error after having the tab open a while’ can be caused one of these things

• The cookie used for load balancing has expired before the users session cookie, so the user now gets load balanced again, potentially to a node where their session doesn’t exit.

• The load balancing is fine, but the server hosting the session has expired the session for some reason (capacity, differently configured expiration time etc….)

Alternatively if you’re using a JWT style access/refresh token pattern, rather than server side sessions, then it’s possible the access token is not being refreshed often enough which results in an expired token being sent to the backend.

HubertManne, 10 months ago

Its annoying but honestly the fact things I block still show up in all is a bigger nuisance.

Xariphon, 10 months ago

You get an explanation?

All I get is ERROR.

Like no shit you did something wrong; do it the fuck again and get it right.

Getting "log in" is already more of an explanation than I ever see.

moldyringwald, 10 months ago

Same here. I like kbin a lot better than lemmy but I’m hanging out on lemmy until that’s fixed and maybe until there’s an Android app

yip-bonk, 10 months ago

Refresh the page fixes it. It’s annoying, but not a big deal. It will get fixed.

Varyag, 10 months ago

It's been happening so much I think this is the first comment I try writing here in about a week. You say 20% but for me it's more like 80% chance of it happening, sometimes when the tab has been open for just a minute. I've been just using my Lemmy account much more, even if it lacks several features I like about kbin.

genoxidedev1, 10 months ago

I didn't have this issue at all yet, very rarely I do get logged out without me doing anything but that happens only while I am not using kbin at all so I just have to log back in and nothing is lost.

Errors while upvoting posts I do sometimes get and I'm thinking that the problem is that I'm upvoting something at exactly the same time someone else is. It leads me to an error page, I click the back button to get back to the post, reload the page and upvote again and it works.

But I never got sent to a login page as an error.

Aesthesiaphilia, 10 months ago

I get the same thing, and far more often with larger threads

I_Miss_Daniel, 10 months ago

Yes it seems like in those instances, maybe the page hasn't finished loading completely, and waiting a little bit before retrying the action fixes it.

Tetra, 10 months ago

The error page I get sent to just says "Error" but the tab's name is "Log in", personally. That's why I assume it's some kind of log in issue.

Teppic, 10 months ago

This might actually be a helpful detail for @Ernest. Come to think of it I think I'd noticed this too, but when you hit back you are still logged in.

I'm using mobile, so don't see the tab name, but my name is replaced with 'login' from what I remember. I'll screenshot and edit this comment next time it happens.

Edit: ok I was wrong. On mobile it does still show my Avatar, not the 'login' text on the generic "Error" page.

genoxidedev1, 10 months ago (edited 10 months ago)

Maybe. I just never really looked at the tabs name and just hit back 🤷. I was never logged out though so either we had different errors or it really was just an assumption on your side.

I'd need to re-encounter my error to check, but now that I want to re-encounter it, it won't ever happen again.

Edit: Actually ☝️🤓, I literally JUST re-encountered it, the page did indeed say "Log in" but I was still logged in and my profile picture etc still showed up in the upper right as usual.

style99, 10 months ago

Hover over "more" and then middle-click the "activity" item. Then, you can up/down vote and/or boost.

nobodyspecial, 10 months ago

What's worse is the login page re-directs to a home page, wiping out the comment I was making and navigating away from the thread I was browsing. I could deal with it if it expired my logins once a week or so (although reddit kept me logged in so long as I kept interacting daily), but multiple times a day is infuriating.

oehpr, 10 months ago

It Really is disruptive. Yah.

density, 10 months ago

I have this issue intermittently. Admin/devs are aware of it.

Sometimes it is fine for a long time while, but then I start having to relogin after <5 mins. Idk if the difference is on my side, the instance, or something in between.