status-monitor Why am I being logged out?

[ikhub]

Everytime I open namepros in chrome I need to login, even if I check the "stay logged in" option. Noticed this from today only. Anyone facing same issue or its me only?

---

Updates from NamePros:

Update on Mar 1, 2017 at 12:48 AM EST:

Login rates are returning to normal levels and we're no longer able to reproduce the issue. If you're still being logged out repeatedly, please let us know.

On Feb 28, Amazon Web Services, a popular service provider, experienced significant outages, resulting in several features on NamePros and other websites partially breaking. These issues were unrelated and were resolved by Amazon.

--Paul Buonopane

 

[usernamex]

Thank you @Paul Buonopane and @Eric Lyon for all your troubleshooting and updates : smile :

What a bunch of addicts we all are : ROFL :

 

[Eric Lyon]

For clarity: Everyone should have been logged out from all devices a single time. That was caused by a security improvement/upgrade to the login system.

However, once you select "Stay logged in" and login again, you should stay logged into NamePros on that device for at least 30 days. If you uncheck "Stay logged in" then you should stay logged in on that device for at least 1 hour.

Hope that helps,

 

[Paul]

Thanks to everyone who reported this. The more info and test cases we have, the easier it is to fix bugs.

 

[Eric Lyon]

We know it's still happening. Paul made an accurate way to detect it this morning so it should be resolved sometime today.

Updates will be posted to the first post.

Thanks for your patience,

 

[usernamex]

Hurray its not just me! My guess was a security measure?
@Paul Buonopane @Eric Lyon

 

[TERADOMAIN]

Same here. It happened last night.

Thanks

 

[Eric Lyon]

Hello,

Thank you for letting us know. Here are details of the change:

I rewrote the code behind the "Remember Me" login option to "harden" it (increase its security), as I wasn't fond of how XenForo implemented it; forcing cookie invalidating was too cumbersome, among other issues. I've reset the session cookies again accordingly. If you weren't logged out before, you should have been logged out this time.

We'll continue to investigate.

 

[Paul]

Based on newer charts we've generated, it looks like we probably solved the issue around 4:30 PM EST on Feb 28. If you haven't visited the site since then, your session won't have been fixed, and you'll be logged out. However, anyone using the site since then should remain logged in. Is anyone still experiencing the issue?

I've now been logged in on multiple devices for hours without being logged out.

 

[DnFolk]

me too facing the same issue from today only

 

[Justin Matmor]

me too

 

[Paul]

We changed how persistent logins work recently, and I think I know why they're not working properly. Debugging now.

 

[Paul]

Just kidding; now it's really fixed. Why does stuff always work in testing and break in production? :P

 

[Eric Lyon]

I figured it was my IP shifting every so often, would dynamic IPs cause this?

Yes,

Every IP address will need to have its own session (Login will be required for each new IP address). If your IP address changes (This is common on mobile especially while traveling between cellphone towers), you'll have to login again.

Hope that helps,

Edited: Removed outdated information. Learn more

 

[Paul]

Not confident that it's resolved yet. The more I look at XenForo's session logic, the more horrified I get that hundreds of thousands of sites use this software without attempting to fix it.

Normally this would all be thoroughly tested over an extended period of time, but we need to release these updates quickly to more or less eliminate any impact from the recent Cloudflare incident.

 

[JB Lions]

This is happening for me again.

 

[Eric Lyon]

Please let us know if this happens again today or anytime in the future. We believe it is fixed. If it does happen again, please notate the date and time that it happened so we can investigate.

Thanks for all your help,

@atinc @JB Lions @Cyberian @AGAME @creataweb @domainventure and anyone else.

 

[briguy]

Same here..even after finally signing in..was going to reply to a thread..but had to sign in again. But hasn't happened again

 

[domvault]

same here

 

[kite26]

Same here, it is very annoying.

 

[johname]

Same.

Only getting kicked off NP if I totally leave Chrome and then get back on Chrome then go to NP.

If I stay on Chrome but enter and leave NP, I will remain logged in

 

[alcy]

Hello,

Thank you for letting us know. Here are details of the change:


We'll continue to investigate.

well it happens randomyl all over the place..

for instance I was just viewing some threads alrigth without prbolem.. then the moment I clicked LIKE, I had to login to complete it

 

[Hootsifer]

Yeah with stay logged in checked once I exit this site and go back, it is logged out.

 

[mitch007]

For your info... I just clicked away from namepros about a minute ago, came back and had to login again :(

 

[Justin Matmor]

For your info... I just clicked away from namepros about a minute ago, came back and had to login again :(

The story of my life in the past 24 hours.