Re: [cross-project-issues-dev] Do You Constantly Need to Login?

[Christopher Guindon <chris.guindon@xxxxxxxxxxxxxxxxxxxxxx>]

Hi All,

I would love to implement 2FA in the near future.  My initial plan was to leverage google-authenticator but I am concerned that this might not work for our users in China.

We are looking for suggestions and I would recommend that we start a bug to discuss this idea!

I am unable to reproduce login issues with Google Chrome but my colleague, Wayne Beaton, is experiencing similar issues with Firefox.

Firefox appears to be quite aggressive with cookie blocking nowadays. Perhaps, it's affecting of our users? Is someone experiencing similar issues with Chrome?

You might also lose your session if you change IP. We do this to reduce the risk of session hijacking:

Finally, if you don't accept our cookie consent banner, most of our cookies will expire at the end of your browsing session.

I will spend some time next week to investigate these issues. 

Please feel free to pursue this conversation on this new bug: https://bugs.eclipse.org/bugs/show_bug.cgi?id=558312.

Cheers,

On Fri, Dec 6, 2019 at 12:14 PM Jonah Graham <jonah@xxxxxxxxxxxxxxxx> wrote:

It is more than just once in a while. I just hit the worst case where from when I started editing a gerrit reply to submitting it I was logged out :-( This is not the first time recently I have had this happen. Before that I had to login to gerrit again. 

I perceive it has gotten worse recently (perhaps even around the same time as Bug 552801 - but that may be coincidence). 

The place I have to log in most often is the wiki - but as it turns out some of the cookies for login on the wiki expire with the session, so that may explain that case (E.g. my_wikiUserName) - these cookies expire unpredictably (https://stackoverflow.com/a/36421888/2796832 and https://bugs.chromium.org/p/chromium/issues/detail?id=128513) - perhaps others of these login cookies do the same thing?

Of the rest of my day to day sites (e.g. github, gmail, stackoverflow) I don't get asked to login again. 

PS eclipse.org is one of the few places I don't have 2FA on. I haven't asked for it up until now because I don't want the hassle of 2FA if I have to log on often.

HTH,

Jonah

~~~
Jonah Graham
Kichwa Coders
www.kichwacoders.com

On Wed, 4 Dec 2019 at 14:59, Greg Watson <g.watson@xxxxxxxxxxxx> wrote:

Constantly.

> On Dec 4, 2019, at 10:24 AM, Denis Roy <denis.roy@xxxxxxxxxxxxxxxxxxxxxx> wrote:
>
> I have to log in once in a while -- but no differently from other sites
> I use. I tend to be "forgotten" from all sites at the same time
> (including non-eclipse), so I think it could be my browser intentionally
> purging cookies or something.
>
> The Cookie Consent banner is shown, if I'm not mistaken, every 30 days
> and it's tied to the domain. If you accept it on Eclipse.org it will
> stick on wiki.eclipse.org but won't stick on eclipsecon.org or
> jakarta.ee, for instance, even though they are both known as Eclipse web
> properties.
>
>
> Denis
>
>
>
> On 2019-12-04 12:09 a.m., Ed Merks wrote:
>> I don't know if it's just me, or because of some Firefox issue, or
>> because of some changes to the Eclipse infrastructure, but I find that
>> I often/constantly need to login when I navigate to a Bugzilla,
>> navigate to a Forum, or navigate to a CI instance.
>>
>> Particularly with the Forum, it shows me needing to login, but when I
>> do that it navigates me to this page:
>>
>>   https://www.eclipse.org/forums/index.php/re/
>>
>> And then I have to go back and refresh the Forum page that I was on
>> before.  It's rather annoying!
>>
>> Bugzilla seems to remember my login a little longer, but it too often
>> requires a new login as well...
>>
>> Is anyone else encountering such problems?
>>
>> Regards,
>> Ed
>>
>> _______________________________________________
>> cross-project-issues-dev mailing list
>> cross-project-issues-dev@xxxxxxxxxxx
>> To change your delivery options, retrieve your password, or
>> unsubscribe from this list, visit
>> https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev
> _______________________________________________
> cross-project-issues-dev mailing list
> cross-project-issues-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev

_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev

_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev

--

Christopher Guindon

Manager, Web Development | Eclipse Foundation, Inc.

Eclipse Foundation: The Platform for Open Innovation and Collaboration

Twitter: @chrisguindon