Last modified: 2013-08-28 17:46:21 UTC
I can reproduce this currently on English Wikipedia. 1. Hard refresh to confirm I'm logged in. 2. Click "Log out" in upper right. 3. While I'm still on the login screen, CentralAuth logs me in in the background, then shows the mw.notify message. In case, it's relevant, I was testing something unrelated without JS shortly before, but while doing this test, JS is enabled.
Just spotted this on Mediawiki.org. I can't log out of my volunteer account and log back in with WMF account :-/
Also, quiddity said the same on Wikidata.org, so it doesn't sound related to my no-JS testing. As a workaround, you can delete all the cookies related to CentralAuth then log out again.
Only if you use "keep me logged in". Not able to reproduce this locally. I'm a little suspicious of the cache change, since it seems that /checkLoggedIn is sending back the gu_id, even though the session and token should be invalid. Brad, can you also take a look at this when you get a minute?
(In reply to comment #3) > Only if you use "keep me logged in". Not able to reproduce this locally. "keep me logged in" is meant to be relevant to cookie duration. If you explicitly log out, that means you want to log out.
(In reply to comment #4) > "keep me logged in" is meant to be relevant to cookie duration. If you > explicitly log out, that means you want to log out. Sorry, I think I misunderstood your point.
Is anyone able to reproduce this today? Neither Brad nor I are able to see it happening.
It looks like a patch was temporarily reverted for about 3 hours yesterday (afternoon PDT), and then reapplied, which would cause this. I'm going to close this as fixed. Please reopen if anyone is able to reproduce this today.
