Issues after session cookie expiration

edco

I've noticed today that the session expired (after x days) and the site showed me as already logged in, but no discussions were showing. Clicking on Flarum's "reload icon" didn't help either.

I had to reload the page, then it showed that I had to re-login.

Two members told me that they even got a 404-page (one told me that she got a "page cannot be found").

What can it be?

P.S. I configured Flarum so that only logged in users can see the content.

Franz

Just to make sure I understand you correctly: You had the page open while the session was expiring, correct?

edco

Franz Just to make sure I understand you correctly: You had the page open while the session was expiring, correct?

Yes, that was the case with me, but I wouldn't know about the other members. The 404 is really weird though...

jordanjay29

It sounds more like the typical session expiring bug, where you look like you're logged in until you refresh the page. The 404 is different, though.

achlys

I had a similar error some days before, but can't document it right now, as my session cookie isn't expired.
Is there a way to force a cookie to expire?

From my memory: I reload an open page while cookie is expired, then I get the 404. When it happens again, I'll make a screenshot.

https://mimir.owncube.com/index.php/s/u0xL9uzwXCXeCJD

Jay

I also see this - I'm logging in through my custom auth, and setting a cookie as suggested elsewhere in this forum. I only give the cookie a lifetime of 1 day and if you dont refresh the page after it has expired you get a 401 permission denied when trying to navigate around

achlys

Reproduced this. The error occurs when on a topic in a category that is only visible for certain users after deleting all cookies on the site.
That is quite annoying as I use my board for two different purposes and every user should only see what is important for him.
Flarum is installed in a subdirectory.
screenshot https://mimir.owncube.com/index.php/s/u0xL9uzwXCXeCJD