this post was submitted on 11 Jul 2023

194 points (98.5% liked)

Lemmy.world Support

3267 readers

10 users here now

Lemmy.world Support

Welcome to the official Lemmy.world Support community! Post your issues or questions about Lemmy.world here.

This community is for issues related to the Lemmy World instance only. For Lemmy software requests or bug reports, please go to the Lemmy github page.

This community is subject to the rules defined here for lemmy.world.

To open a support ticket

You can also DM https://lemmy.world/u/lwreport or email [email protected] (PGP Supported) if you need to reach our directly to the admin team.

Follow us for server news 🐘

Outages 🔥

https://status.lemmy.world

founded 2 years ago

MODERATORS

194

Server side bug with lemmy.world and intermitent authentication. (lemmy.ml)

submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/support

80 comments fedilink hide all child comments

I am currently getting signed out every minute from lemmy.world. This is not a client side cache issue. I tested making API calls from the command line (with curl) with no cache and the issue still occurs. One call I get the correct response, the next I get a 400 telling me im not signed in.

I'm primarily testing with the https://lemmy.world/api/v3/user/unread_count api endpoint. I'm not sure if this issue occurs with all endpoints.

Reproduction steps:

Get a lemmy.world JWT token for your account using your desired method (eg. postman).
curl https://lemmy.world/api/v3/user/unread_count?auth={JWT_TOKEN_HERE}
Note the 400 error. If you do not get an error repeat step 2.

Edit

This issue only seems to affect lemmy.world so a temporary workaround is to use a different instance for the time being.

(page 2) 26 comments

sorted by: hot top controversial new old

[–] ElectroVagrant 2 points 2 years ago

I noticed it a little yesterday, but strangely it seems worse today. I'd cleared cache & cookies after the compromise issue, so I was pretty sure it wasn't to do with not doing that, however I think OP's on the right track with their assessment.

Not really sure why it would suddenly seem worse though, other than maybe something to do with server traffic/activity.

[–] aeharding 1 points 2 years ago (1 children)

I have the same issue, not sure what's the root of the problem

[–] TheVampireSaga 1 points 2 years ago

Lovely lmao

[–] [email protected] 1 points 2 years ago (1 children)

Ah damn. Was wondering what was happening. My lemmy.world account is unusable atm due to the bug. I'm gonna have to figure out what all of my subs were.

[–] [email protected] 2 points 2 years ago

There are tools that can help! https://lemmy.ml/post/1875767

I made LASIM - it's takes 2 API calls to fetch your subscriptions (1 login, 1 profile), so with lemmy.world being 50/50 on those calls, you might have to try a few time, but once you have em, it will be easy to push them to a new instance.

[–] [email protected] 1 points 2 years ago (1 children)

What happens when you call POST /api/v3/usre/login after the 400? Do you get another JWT token or the same one?

[–] [email protected] 1 points 2 years ago

Different token each time

[–] nix98 1 points 2 years ago

I was running into this across both my accounts on lemmy.world. Changing my password seems to have resolved it both on the web and in Mlem.

[–] [email protected] 0 points 2 years ago (12 children)

Does resetting your password stop it?

load more comments (12 replies)

load more comments