checkout_onepage_progress showing previous users shipping address

[csdougliss]

Not sure if this is related to turpentine or not, but I am testing checkout (no HTTPS) and some of my users who are testing it are seeing a previous users shipping address in the checkout progress block?

We are using an external module to remove the postage step, but I have disabled it for now (only in it's admin setting):

Clearandfizzy_Reducedcheckout

[mytuxedo]

Add checkout/ to your URL blacklist in turpentine’s settings.

[csdougliss]

Thanks, can be closed now. I thought this might be an issue but checkout_onepage_progress is specifically set in turpentine_esi.xml to not be cached?

[mytuxedo]

Interesting actually, the admin panel is exclusively defined to not cache it, even though while I was testing the admin panel in a non secure environment, varnish was definitely caching it. Which is why I added the URL to the blacklist which solved the problem.

This perhaps could be an issue?

[aheadley]

@craigcarnell Sounds like there is a bug causing the nocache flag to be ignored, will investigate.

@mytuxedo This is probably a different issue, as the admin panel is blacklisted with the same mechanic as the URL blacklist. Are you using a non-standard admin location (i.e. not /admin/)? If so, how did you set it?

[evensisftw]

@aheadley sorry was on another github account, I am indeed, it's set in etc/local.xml via:

<admin>
    <routers>
      <adminhtml>
        <args>
          <frontName><![CDATA[store_admin]]></frontName>
        </args>
      </adminhtml>
    </routers>
 </admin>

[aheadley]

@evensisftw Ok, can you run this script from your Magento root directory and paste the output here?

<?php

define('MAGENTO_ROOT', getcwd());
include_once 'app/Mage.php';

var_dump( array(
    Mage::getStoreConfig( 'admin/url/use_custom_path' ),
    Mage::getStoreConfig( 'admin/url/custom_path' ),
    Mage::getConfig()->getNode( 'admin/routers/adminhtml/args/frontName' ),
) );

EDIT: Updated script with an extra line.

[evensisftw]

array (size=3)
  0 => string '0' (length=1)
  1 => null
  2 => 
    object(Mage_Core_Model_Config_Element)[140]
      string 'store_admin' (length=11)

[aheadley]

Very strange, store_admin should have been included in the URL blacklist then. Can you put your VCL in a gist and link it here?

[csdougliss]

FYI I installed a self signed certificate and used HTTPS and it was still caching the block. Appreciate your effort. Thanks!

[sprankhub]

I just had exactly the same issue on Magento 1.9.2.4 with Turpentine 0.7.2. Although adding checkout to the blacklist works, I think this should work out of the box. Would it make sense to populate the following URLs to the blacklist by default?

cron\.php
customer
checkout
paypal/ipn
paypal/standard/success
paypal/express/return
paypal/express/review