Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ghostery does not keep me logged-in #43

Open
WFransL opened this issue Apr 21, 2018 · 44 comments
Open

Ghostery does not keep me logged-in #43

WFransL opened this issue Apr 21, 2018 · 44 comments
Assignees

Comments

@WFransL
Copy link

@WFransL WFransL commented Apr 21, 2018

Ghostery does not keep me logged-in

I would expect that once logged in to Ghostery on a PC That Ghostery stays logged-in between sessions, Is is not what happens. Every now and then I have to log-in again.

  1. Start PC
  2. Open Browser
  3. Check if Ghostery is logged-in
  • Chrome 66.0.3359.117
  • WIN10
  • Ghostery 8.1.2
@Aziz-Ghostery
Copy link

@Aziz-Ghostery Aziz-Ghostery commented Apr 25, 2018

Hi There,
We've had dealt with this issue awhile ago, and we frankly thought it was fixed.
We'd appreciate it if you could help us troubleshoot this issue by answering the following questions:
When you are not using your machine, do you choose to:
Log off:
Clock:
Sleep:
Shutdown:
How long do you normally leave your machine in the above state?

Chrome Settings:

Privacy and security ==> Content settings ==> Cookies
Allow site to Save & read cookie data (On/Off):
Keep local data only until you quit your browser (On/Off):
Block third-party cookies (On/Off):

Privacy and security ==> Content settings ==> JavaScript

Allowed (On/Off):

System ==> Background Apps

Continue running background apps when Google Chrome is closed (On/Off):

Regards,
Aziz

@WFransL
Copy link
Author

@WFransL WFransL commented Apr 26, 2018

@markofstrathclyde
Copy link

@markofstrathclyde markofstrathclyde commented May 8, 2018

(Firstly : great extension)

But... me too, any thoughts much appreciated.

Ta

Mark


Windows 10 build 1709 64-bit Intel-i5 Chrome 66.0.3359.139

When you are not using your machine, do you choose to:
Normally sleep or switch accounts with hibernation happening if left alone for 8 hours +

Chrome Settings:

Privacy and security ==> Content settings ==> Cookies
Allow site to Save & read cookie data (On/Off): on
Keep local data only until you quit your browser (On/Off): off [is that the problem??]
Block third-party cookies (On/Off): off

Privacy and security ==> Content settings ==> JavaScript

Allowed (On/Off): on

System ==> Background Apps

Continue running background apps when Google Chrome is closed (On/Off): off

@konqui
Copy link

@konqui konqui commented May 31, 2018

same here i also always get logged out

@computeronix
Copy link

@computeronix computeronix commented Jul 2, 2018

+1, Edge and Chrome keeps logging me out over time. For a while I stay logged in, then randomly get logged off. My other extensions I use keep me logged in all the time.

Windows 10 (every build I have used is affected).

@oduis
Copy link

@oduis oduis commented Jul 3, 2018

Same here. I have several machines, and I thought it saw a correlation there, when I log in to another machine it logs me off on the initial machine.
Could it be that the user data is synced across devices?

@WebGroupWest
Copy link

@WebGroupWest WebGroupWest commented Jul 3, 2018

Definitely "me, too." I recall the "fix" some time back, but it only remained fixed for a few weeks. It's been logging me out constantly, ever since.

Doesn't seem to matter how I log-out of Windows (usually hibernate, or shut down), and my Chrome settings are as you specify above.

Happens all the time for me on Windows, and my Chromebooks.

FWIW, other extensions that maintain my sign-in (such as Trello, Evernote, etc.) do not have this problem. It definitely seems specific to the ghostery implementation.

@mgrigni
Copy link

@mgrigni mgrigni commented Jul 5, 2018

I see this also, is the "do not track" setting relevant?

@christophertino
Copy link
Member

@christophertino christophertino commented Jul 6, 2018

Hey guys, we hear you on the log-out issue. We have a new v2 API for our user authentication system that @trickpattyFH20 is currently integrating on the feature/api-v2-auth branch. It kills the old refresh token logic that caused all this headache. We're scheduling this for our 8.2.1 release hopefully next week.

@christophertino
Copy link
Member

@christophertino christophertino commented Aug 10, 2018

We released v8.2.3 earlier in the week which should resolve the logout issue. Please give it a test and let us know if you're still getting logged out.

One note: If you have your browser set to clear cookies on close you will be logged out of Ghostery. In Chrome, the setting "Keep local data only until you quit your browser" should be off. In Firefox, you should have Cookies and Site Data > Keep until they expire.

@altae7
Copy link

@altae7 altae7 commented Aug 12, 2018

The issue is fixed? On the contrary, login is completely broken for me (Arch Linux, Firefox). I cannot even login anymore. If I try it tells me my login attempt was successful but as soon as I close the Ghostery pop-up and re-open it I'm logged out again.

@christophertino
Copy link
Member

@christophertino christophertino commented Aug 14, 2018

Thanks for the heads up @altae7. It looks like the Firefox implementation of chrome.cookies.onChanged is a little wonky. It was also causing problems on Edge. #158 should be the answer.

@altae7
Copy link

@altae7 altae7 commented Aug 14, 2018

Thanks. This means we have to wait for a new version to come out, right?

@trickpattyFH20
Copy link
Contributor

@trickpattyFH20 trickpattyFH20 commented Aug 15, 2018

@altae7 yes a fix for this will be out with the next release ( PR #158 )

@mcicconi
Copy link

@mcicconi mcicconi commented Aug 21, 2018

@christophertino +1 to @altae7's comment about Firefox - I am consistently getting signed out as well. Thanks for the upcoming fix.

@christophertino
Copy link
Member

@christophertino christophertino commented Aug 21, 2018

We found a few more edge-cases contributing to this issue that have now been patched. We're testing the release build now.

@christophertino
Copy link
Member

@christophertino christophertino commented Aug 23, 2018

@altae7 @mcicconi Ghostery v8.2.4 is now live. Please let us know if you can now remain signed in.

@WFransL
Copy link
Author

@WFransL WFransL commented Aug 23, 2018

@altae7
Copy link

@altae7 altae7 commented Aug 23, 2018

Negative, still the same. I cannot login at all.

@Aziz-Ghostery
Copy link

@Aziz-Ghostery Aziz-Ghostery commented Aug 24, 2018

@altae7 We are working a logout issue for Edge Browser, However V 8.2.4 has the fix for Chrome and FF. Would you please restart your Chrome browser, make sure you are on V 8.2.4 and try sign in again.
Please let us know the outcome, Thanks.

@altae7
Copy link

@altae7 altae7 commented Aug 24, 2018

I don't use chrome, I use Firefox. And login does not work despite the fact that Ghostery 8.2.4 is installed and I've restarted the computer several times in the meantime. It's simply broken.

@Aziz-Ghostery
Copy link

@Aziz-Ghostery Aziz-Ghostery commented Aug 24, 2018

@altae7 This might be due to a corrupted cookies.sqlite file in Firefox's profile folder.
In order to fix this, just rename or remove cookie.sqlite while Firefox is not running.
Open a terminal of choice and type the following:
$ rm -f ~/.mozilla/firefox/.default/cookies.sqlite
The profile id is a random 8 character string.
Restart Firefox and see if it solved the problem.
If the issue persists try creating a new FF profile reinstall Ghostery in that profile and see if the issue is solved.

@Lokumskaster
Copy link

@Lokumskaster Lokumskaster commented Aug 26, 2018

Just installed Windows 10 today. Installed Chrome including Ghostery (8.2.4). I have had to log on three times today already.

@Storm-Engineer
Copy link

@Storm-Engineer Storm-Engineer commented Sep 15, 2018

I just noticed this as well. I can't stay logged in either.

@Aziz-Ghostery I tried deleting my cookies.sqlite but it did not fix it.

Arch Linux
Firefox 62.0
Ghostery 8.2.4

@christophertino
Copy link
Member

@christophertino christophertino commented Sep 21, 2018

Hey guys, we're not having any luck reproducing the logout issue since the 8.2.4 release. Our auth is cookie-based, so if you are getting immediately logged out it means something is nuking the three cookies set on https://account.ghostery.com.

For testing purposes, please check your browser settings to see if you are blocking third-party cookies. If not, you can make an allow exception for https://account.ghostery.com https://consumerapi.ghostery.com (Preferences > Privacy > Cookies > Exceptions in Firefox). Also check to see if another installed extension may be deleting third-party cookies. Lastly, in Firefox if you have first party isolation enabled (custom setting in about:config) that will break our Auth.

Let me know if any of this helps.

@Storm-Engineer
Copy link

@Storm-Engineer Storm-Engineer commented Sep 21, 2018

@christophertino I already had an allow exception for the whole ghostery.com domain.

The only cookie getting created is analytics.ghostery.com

@altae7
Copy link

@altae7 altae7 commented Sep 22, 2018

Ok, thanks for the reply. It's the first party isolation then. Since I'm not willing to disable it I'll live with not being able to login.

@Storm-Engineer
Copy link

@Storm-Engineer Storm-Engineer commented Sep 23, 2018

@christophertino I did some further testing. Apparently FF's handling of "3rd party" cookies is the issue.

I had 3rd party cookies set to "never allow", and using Allow exceptions for sites I use. This worked in the past. Now however, apparently it doesn't anymore.

Changing 3rd party cookies to "always" fixed the login issue and changing it back to "never" broke it again. This sounds like a Firefox bug to me because I'm pretty sure Allow exceptions should still work with 3rd party.

@christophertino
Copy link
Member

@christophertino christophertino commented Sep 25, 2018

@Storm-Engineer Can you try setting an Allow exception for https://consumerapi.ghostery.com ?

I was able to force the logout with third party cookies set to Never, but adding an exception for the above domain seems to clear it up. Let me know.

@Storm-Engineer
Copy link

@Storm-Engineer Storm-Engineer commented Sep 26, 2018

@christophertino Yes, setting that exception soled it indeed.

But I already had an Allow for the main "ghostery.com" domain, and that should have did the trick already without explicitly setting the subdomain. Plus, other sites have malfunctioned lately as well (eg. YouTube kept forgetting the Dark theme and Autoplay settings) until I set it from Never to Visited.

So I still think Firefox started handling this differently, either intentionally or because of a bug.

@trickpattyFH20
Copy link
Contributor

@trickpattyFH20 trickpattyFH20 commented Oct 9, 2018

For anyone unable to login from the extension panel on Ubuntu Firefox:
It looks like there is a bug with the Linux package ibus that closes any extensions in FF as soon as a type=password field is focused ibus#2002

Other extensions are experiencing the same problem, and unfortunately there isn't much we can do to workaround it. bitwarden#580

If this is the case, you can try logging in from the Ghostery website https://signon.ghostery.com
The authentication from there should carry over to the extension.

@rakoczy
Copy link

@rakoczy rakoczy commented Oct 28, 2018

@Storm-Engineer Can you try setting an Allow exception for https://consumerapi.ghostery.com ?

How to do it in FF63?

@christophertino
Copy link
Member

@christophertino christophertino commented Oct 29, 2018

@rakoczy It's under Preferences > Privacy & Security > Cookies & Site Data > Exceptions

@salieri
Copy link

@salieri salieri commented Jan 31, 2020

This issue remains with Ghostery 8.4.6 on Google Chrome 80.0.3987.78. You log in to Ghostery, forget it for a few days or a week, and when you check back you are logged out.

@christophertino
Copy link
Member

@christophertino christophertino commented Mar 2, 2020

Are you clearing cookies on browser close? That would cause a logout. Another thing to consider is that the refresh token expires after 7 days. So if you don't open your browser for a week you would get logged out of Ghostery.

@salieri
Copy link

@salieri salieri commented Mar 11, 2020

@christophertino I don't think either one of those accurately describes my case. I certainly don't clear cookies on browser close, and I think this issue occurs often enough that the second one is not the case either, but it's hard to be sure. I'll check that.

On that note, though: If Ghostery silently discards an expired cookie and doesn't inform the user that their session is no longer valid, then the UX is very confusing. How would the user ever know when to log back in?

@tankmann
Copy link

@tankmann tankmann commented Mar 14, 2020

I have exact the same issue... I only recognize it when I get an offer showing and then I remember or I'm logged out again. Using computer / browser every day, don't delete cookies often... Only thing I have is two location profiles on my mac I switch (office and home), but that can't be the reason. It's actually really annoying, I'm paying and then have to re-login all the time.

@christophertino
Copy link
Member

@christophertino christophertino commented Apr 11, 2020

@tankmann Are you on Chrome as well?

@christophertino christophertino self-assigned this Apr 11, 2020
@tankmann
Copy link

@tankmann tankmann commented Apr 12, 2020

@tankmann Are you on Chrome as well?

Yes I'm on Chrome as well.
OSX 10.15.4 (19E287)
MacBook Pro (13-inch, 2018, Four Thunderbolt 3 Ports)
Version 80.0.3987.163 (Official Build) (64-bit)

@bramdejager
Copy link

@bramdejager bramdejager commented Apr 20, 2020

Same issue here, I'm running Ghostery for Edge version 8.4.8 on Windows 10. This is the new Edge browser from Microsoft on Chromium.

@tankmann
Copy link

@tankmann tankmann commented May 6, 2020

Ping Pong?

@tankmann
Copy link

@tankmann tankmann commented Jun 30, 2020

I've cancelled my subscription now... Had enough of being logged out all the time plus no reaction here.
Bye.

@christophertino christophertino linked a pull request that will close this issue Aug 8, 2020
5 of 5 tasks complete
@christophertino christophertino removed a link to a pull request Sep 24, 2020
5 of 5 tasks complete
@christophertino christophertino mentioned this issue Sep 24, 2020
5 of 5 tasks complete
@mojorisinagain
Copy link

@mojorisinagain mojorisinagain commented Dec 14, 2020

Running Ghostery version 8.5.4, in Chrome version 87.0.4280.88 (64-bit), on Windows 10 Pro. Started seeing this automatic log out "re-released feature" in mid-to-late November, 2020. Annoying

@etuttle
Copy link

@etuttle etuttle commented Apr 26, 2021

I run Ghostery on ungoogled-chromium-macos which is a combo I was so excited about! Until I noticed this dropped authentication issue. In my case, I've never seen login stick across a browser reboot. If it does work at all, it is for a very short time. And I certainly have other extensions that manage to persist their auth.

I will see what I can figure out about 3rd party cookies, exceptions for https://consumerapi.ghostery.com and the like. Meanwhile, I would suggest to Ghostery: after so many years of this problem, could there be a way to detect that it is happening and warn the user? I would prefer to be alerted about that my session was lost. Link to a troubleshooting doc? I (like everyone else here, I bet) had to slowly notice this was happening, get frustrated about it, in my case I emailed support and didn't hear back. Then I finally find this thread. Not a positive experience.

Tackling this head-on may not help your bottom line, but it's the user centric thing to do.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet