Last modified: 2013-05-17 05:51:58 UTC
Created attachment 11276 [details] Screenshot of the post-login screen on the English Wikipedia showing missing auto-login icons When I go to <https://en.wikipedia.org/w/index.php?title=Special:UserLogin> and successfully enter my username and password, the post-login screen isn't always loading all of the icons as it used to. This appears to have started today (October 31, 2012). I asked in #wikimedia-tech and another user (Danny B.) reported similar strangeness today. It _feels_ like the third-party cookie behavior has changed a bit and now browsers consider .wiktionary.org, etc. to be third-party and blocked when they were previously allowed. But I'm not sure. After submitting my username and password, I'm successfully logged in to en.wikipedia.org, but not to the other sites. Attaching a screenshot as well.
I'm getting the same broken behavior (icons not loading) in Safari, Firefox, and Google Chrome on multiple computers and this just started today, as noted in comment 0. This leads me to believe that some change from today (cf. <http://wikitech.wikimedia.org/index.php?title=Server_admin_log&oldid=53070#October_31>) is to blame, though I don't see any CentralAuth changes in the log off-hand.
We managed to reproduce this on James's computer in Safari, but not on my computer in Chrome. I ran a Wireshark trace on James's computer (because Safari's debugger is useless for this particular purpose) and noticed that the cookie that is being set in stage 1 is not being sent back by Safari in stage 3. The response to a cookieless stage 3 request appears to be an error page. This is bad because 1) it's HTML while the browser is expecting an image and 2) it has a 200 status code while IMO it should really be 403. It's not clear to me why these cookies are being dropped. If it's because of some 3rd-party cookie restriction, that should have been happening before today's changes as well, although the failure would have been less conspicuous: the images would still load, but the cookies wouldn't, so you would just have had broken SUL behavior but still have seen shiny images.
I am getting all broken icons when logging into wikidata. (not tried other wikis) We've been having issues with people staying logged in. I can't seem to stay logged in as [[User:Aude]], especially in Chrome. I seem to be able to login and stay logged in using Firefox and see the icons there.
For me it is the other way around. Firefox doesn't keep the login after I logged in, but in Chrome it works fine. All icons are displayed though.
Everything is fine in Safari 6 and Chrome 23. In Firefox 16 I can login to Wikidata, but then as soon as I click Special:RandomArticle, I am logged out again. This is not the case on en.wikipedia, where I stay logged in. All icons are displayed. It does not matter if I login on Wikidata or on en.wikipedia, I am logged in in Wikipedia, but not on Wikidata. No matter whether I use http or https. But I did the following. Logged in on de.wikipedia, I follow their link on the Main Page to Wikidata as a sister project, and I arrive on de.wikidata.org on the Main Page, logged in. From many links it works. I can go to recent changes, go to items, etc. and stay logged in. Only Special:RandomArticle kicks me out, and I am logged out. It is all a bit confusing, and I can not really see a pattern here. I am running MacOS 10.7.5.
I think I got it. I get logged out at www.wikidata.org, but I am logged in at en.wikidata.org and de.wikidata.org. Only when I go to www.wikidata.org, I am not logged in. So en.wikidata.org/wiki/Q1 : logged in. de.wikidata.org/wiki/Q1 : logged in. www.wikidata.org/wiki/Q1 : not logged in. When I click on "Random page" for some reason I land on www.wikidata.org but that seems like an unrelated issue. I hope this helps.
The original issue reported by MZMcBride was a bug in a security patch, that was later reverted, so I know the original issue has been fixed. Denny, is the issue you're having that you're being logged out of Wikidata? Or that SUL isn't logging you into Wikidata in the first place?
(In reply to comment #7) > Denny, is the issue you're having that you're being logged out of Wikidata? > Or that SUL isn't logging you into Wikidata in the first place? Denny: ping?
Marking this bug resolved/fixed. Denny certainly knows how to file a separate bug, as appropriate and necessary.
