I am currently getting signed out every minute from lemmy.world. This is not a client side cache issue. I tested making API calls from the command line (with curl) with no cache and the issue still occurs. One call I get the correct response, the next I get a 400 telling me im not signed in.
I’m primarily testing with the https://lemmy.world/api/v3/user/unread_count api endpoint. I’m not sure if this issue occurs with all endpoints.
Reproduction steps:
- Get a lemmy.world JWT token for your account using your desired method (eg. postman).
curl https://lemmy.world/api/v3/user/unread_count?auth={JWT_TOKEN_HERE}- Note the 400 error. If you do not get an error repeat step 2.
Edit
This issue only seems to affect lemmy.world so a temporary workaround is to use a different instance for the time being.
This is happening in the connect app and I thought I was going crazy.
Ahhh thanks for that! I took could not stay logged in, annoyingly id find out when I attempted a post/reply, “not logged in”. Using Connect or website.
I installed jerboa, logged in ok and here I am. If it goes bad too then I dunno…
Yeah, was wondering what was going on. Hope it gets fixed soon!
Making a new post is a nightmare. I wish the submit button would time out in these instances so you can try again. Right now I’m having to copy and paste into a new tab and hope for the best (but fail, 5 times and counting).
What happens when you call
POST /api/v3/usre/loginafter the 400? Do you get another JWT token or the same one?Different token each time
I’m getting this too, even after clearing cookies and logging in again. I’ve seen it on multiple devices (Android phone, Linux desktop with Chrome).
Just add me to the list. Jerboa seems to stay logged in for about 75% of interactions.
I’ve been experiencing something similar/related. If I am logged in and open something in a new browser window, it frequently (starting today) shows me as not logged in. If I refresh the page, I’m suddenly logged in. This doesn’t feel like a authentication problem as much as a timing issue while loading the page. Or maybe what I’m seeing is an entirely different issue.
I have the same issue, not sure what’s the root of the problem
deleted by creator
Ah damn. Was wondering what was happening. My lemmy.world account is unusable atm due to the bug. I’m gonna have to figure out what all of my subs were.
There are tools that can help! https://lemmy.ml/post/1875767
I made LASIM - it’s takes 2 API calls to fetch your subscriptions (1 login, 1 profile), so with lemmy.world being 50/50 on those calls, you might have to try a few time, but once you have em, it will be easy to push them to a new instance.
FWIW, I can confirm I’m having this issue as well. The load balancing hypothesis seems sound given the behavior I’m seeing. Definitely making lemmy.world pretty much unusable at this point.
I can’t seem to comment on a couple specific posts on the instance. But as you can see, it works on this one. I am wondering if that’s related? I’m not even on my Lemmy.World account and get an unable to post error as soon as I hit the button, like it’s not even trying to do anything.
From my experience it’s entirely random. You can make 5 actions and all 5 will work. Then have a string of 5 actions where none would work.
Might be worth noting that the Google password manager doesn’t recognize to auto fill
Sounds like lemmy.world runs on 2 instances and the requests are being loadbalanced between those two. That and that the jwt secret is different between those two instances causing one to accept and the other to reject
This is also my theory. I think you’re right on the money here. They probably rotated secrets from yesterday’s hack and forgot to restart both servers.
Does anyone know who can contact the server admins?
Yell real loud in all caps
REAL LOUD
Yeah. Lemmy.world is currently unusable on the desktop. I don’t have that problem in Memmy. Growing pains but I hope the problem will be fixed soon. Do anyone know if one of the mods in North America are aware of the problem?
Hey! you actually gave useful information. Some people are just grunting or snapping at people hoping someone figures it out lol.
I was having trouble in liftoff and the browser. Cleared data and cache from liftoff thinking maybe something got messed up there and now I can’t even log back into my .world account 🤷♂️ I’ll hang here for a bit I guess.
Same here, can’t log in again via Liftoff.
I’m choking in desktop browser and in liftoff. Jerboa seems ok. It’s weird to me how different clients react differently, I’m not sure how they interact differently.
