users keep getting logged out #49
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
fauno: is it possible that [gitea] keeps logged in accounts after restarts? i have to re-log in almost every day
ammar: I did a quick internet search and seems like the LOGIN_REMEMBER_DAYS value defaults to 31 days and we didn't override this in our deployed app
Wondering what else could be at play here
fauno: i imagine it's some token used to sign/validate cookies that's not being persisted
ammar: Im checking the cookies I have on my browser and they don't include a cookie called gitea_incredible people refer to in this and this threads
ammar: Hmmm there is also the session provider that seems to point to memory by default and is not configured by the recipe (https://docs.gitea.com/administration/config-cheat-sheet#session-session)
It turns out, I wasn't letting the browser keep cookies to begin with
This eliminating some hypothesis and taking away my assumed reproduction case
Now I need to reproduce or dig deeper into settings and cookies ... etc
@fauno if you have any notes on the reported behavior it would be really helpful (Is it always after a restart? is there a noticeable cadence? is your account living native to gitea or as a remote account? do you know someone else that sees it and have similar and/or different observations to all of these?)
ofc this is a lot to ask so basically just what you know or remember, and I'll post it on matrix to solicit engagement as well.
Thanks! I think I figured out a lead with the help of a comment from @jade.
https://git.coopcloud.tech/-/admin/config
https://docs.gitea.com/administration/config-cheat-sheet#session-session
Can someone get a PR out to configure the session management to not use memory?
And let's set
LOGIN_REMEMBER_DAYSto "forever" to make up for all the log ins 😆i just made the forgejo session manager configurable the other day, maybe you can cherry pick here?
coop-cloud/forgejo#31
to answer the question, i remember it happens almost everyday i come here looking for something and i have to re-login. not today though. i created this account with the gitlab provider.