Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password-protected blog doesn't show correctly #298

Open
idelem opened this issue Apr 15, 2020 · 4 comments
Open

Password-protected blog doesn't show correctly #298

idelem opened this issue Apr 15, 2020 · 4 comments
Labels
bug

Comments

@idelem
Copy link

@idelem idelem commented Apr 15, 2020

Describe the bug

I have a password-protected blog which was working as expected a while ago (i.e. tested using different devices and browsers). Today I tried to read the blog from another device, say device A, but I forgot the password. So I logged in on device B and changed the password. But I cannot view the blog from A even when the password is correct.

I think the authentication actually passed, because wrong inputs will prompt "Incorrect Password" on the page, while the page returned doesn't have this section.

I tried with another blog and it failed as well. I wonder what might have been broken, because it used to work a month ago.

Is there any error log I can look into?

Steps to reproduce (if necessary)

Steps to reproduce the behavior:

  1. Switch to passwd-protected mode and set password
  2. Try to input password from elsewhere
  3. Page still shows input form

Expected behavior

What should've happened?

Should've been able to read the blog.

Application configuration

  • Single mode or Multi-user mode? Multi-user mode?
  • Database? sqlite
  • Open registration? no
  • Federation enabled? yes
    Version or last commit: 0.11
@thebaer
Copy link
Member

@thebaer thebaer commented Apr 15, 2020

Thanks for reporting this! My first instinct is that there's an expiration issue with the cookie that keeps you "logged in" to password-protected blogs. But we'll need to confirm that.

@cjeller1592
Copy link
Contributor

@cjeller1592 cjeller1592 commented Apr 16, 2020

I tried the steps to reproduce the error & it worked for me (was able to use updated password on new device). Could you reset your cookies for your instance and try this again @idelem? It might very well be a cookie issue that @thebaer mentioned.

@idelem
Copy link
Author

@idelem idelem commented Apr 17, 2020

@cjeller1592 Yes that worked, thank you!

(I'll leave this open because I still consider it a bug. )

@cjeller1592
Copy link
Contributor

@cjeller1592 cjeller1592 commented Apr 17, 2020

You're welcome @idelem! And yes, I agree to leave it open too — the solution is only a temporary fix until a more permanent one can come about.

@thebaer thebaer added the bug label Apr 23, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants
You can’t perform that action at this time.