| 00:08.23 | *** join/#uphpu TuxToaster (~TuxToaste@wfw.vivint.com) |
| 00:08.24 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 00:51.17 | *** join/#uphpu MikeHansenMe (~mike@c-67-186-219-152.hsd1.ut.comcast.net) |
| 01:19.48 | *** join/#uphpu clintberry (~clintberr@c-50-160-0-94.hsd1.ut.comcast.net) |
| 01:19.48 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 02:07.33 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 02:07.42 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 02:58.12 | *** join/#uphpu clintberry (~clintberr@c-50-160-0-94.hsd1.ut.comcast.net) |
| 02:58.12 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 03:21.34 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 03:21.35 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 03:50.52 | *** join/#uphpu kendsnyder (~Adium@65-130-243-123.slkc.qwest.net) |
| 03:50.52 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 04:20.03 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 04:20.04 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 05:08.23 | *** join/#uphpu clintberry (~clintberr@138.sub-70-208-4.myvzw.com) |
| 05:08.23 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 05:17.58 | *** join/#uphpu clintberry (~clintberr@207.sub-70-208-2.myvzw.com) |
| 05:17.58 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 05:39.53 | *** join/#uphpu clintber_ (~clintberr@207.sub-70-208-2.myvzw.com) |
| 05:50.16 | *** join/#uphpu SledMonkey (~SledMonke@c-98-202-229-160.hsd1.ut.comcast.net) |
| 05:54.16 | *** join/#uphpu stirlingw (~stirlingw@c-71-199-18-155.hsd1.ut.comcast.net) |
| 06:29.05 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 06:29.05 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 07:41.12 | *** join/#uphpu clintberry (~clintberr@186.sub-70-208-0.myvzw.com) |
| 07:41.12 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 08:19.21 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 08:19.22 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 10:08.06 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 10:08.06 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 11:57.01 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 11:57.02 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 12:34.35 | *** join/#uphpu kendsnyder (~Adium@65-130-243-123.slkc.qwest.net) |
| 12:34.35 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 13:34.37 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 13:34.37 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 13:38.05 | *** join/#uphpu macnewbold (~macnewbol@inferno.apxalarm.com) |
| 13:38.05 | *** mode/#UPHPU [+o macnewbold] by ChanServ |
| 13:45.56 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 13:45.58 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 14:03.06 | *** join/#uphpu bbankes (~bbankes@c-73-52-142-234.hsd1.ut.comcast.net) |
| 14:26.48 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.101.200) |
| 14:26.49 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 14:33.16 | *** join/#uphpu supernovia (~Adium@2605:a601:520:c001:15ff:b6ba:ceec:5152) |
| 14:41.00 | *** join/#uphpu josephscott (~josephsco@192.0.65.252) |
| 14:41.00 | *** mode/#UPHPU [+o josephscott] by ChanServ |
| 14:50.34 | *** join/#uphpu MikeHansenMe (~mike@173-165-131-122-utah.hfc.comcastbusiness.net) |
| 14:54.40 | *** join/#uphpu stirlingw (~stirlingw@hsc103-201.med.utah.edu) |
| 15:31.48 | *** join/#uphpu macnewbold (~macnewbol@inferno.apxalarm.com) |
| 15:31.48 | *** mode/#UPHPU [+o macnewbold] by ChanServ |
| 15:48.33 | *** join/#uphpu itimber (~Adium@ip72-209-186-65.ks.ks.cox.net) |
| 15:48.34 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 15:56.41 | *** join/#uphpu bbankes (~bbankes@50-200-100-242-static.hfc.comcastbusiness.net) |
| 16:06.15 | *** join/#uphpu bbankes_ (~bbankes@50-200-100-242-static.hfc.comcastbusiness.net) |
| 16:55.54 | *** join/#uphpu supernovia (~Adium@2605:a601:520:c001:bc3b:e523:b359:a6c4) |
| 17:20.33 | skinner | Hey php community. I have an issue I can't seem to figure out. |
| 17:21.18 | skinner | In this platform I'm working on, we have large clients that have their own systems internally that can link to our platform. |
| 17:21.40 | skinner | The link contains a hash which automatically logs in their users to our system. |
| 17:21.54 | skinner | Well it's supposed to anyway. |
| 17:22.37 | skinner | When we get the visitor hitting our system, we detect the hash string in the url |
| 17:23.28 | skinner | then decode it, and if it's a valid user, we "log them in", start a session, and redirect to a different page -- their internal dashboard in our system. |
| 17:23.59 | skinner | after the redirect we seem to lose the session and so the visitor is taken to the home page. |
| 17:24.17 | skinner | In my debugging it seems that it is caused by the http referer |
| 17:24.36 | josephscott | check cookies sent/received? |
| 17:25.34 | skinner | when we log the user in, the cookie is being set correctly from what we can see, but then on redirect, it's like it ignores the cookie |
| 17:25.55 | skinner | if I take the link they click on in their system, and literally paste it into my browser, it works just fine. |
| 17:26.13 | skinner | it only breaks when they click on it from their system. |
| 17:26.30 | skinner | josephscott: I think you are correct in that it is a cookie issue |
| 17:26.47 | skinner | I'm just cross-eyed to the point I'm not sure what to change...lol |
| 17:27.09 | josephscott | is the cookie not persisting past the redirect? |
| 17:27.22 | josephscott | when all else fails, inspect all request/response headers |
| 17:36.52 | *** join/#uphpu SledMonkey (~SledMonke@c-76-27-8-108.hsd1.ut.comcast.net) |
| 17:40.33 | *** join/#uphpu UtahDave (~boucha@198.217.121.244) |
| 17:40.34 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 17:52.51 | *** join/#uphpu stirlingw (~stirlingw@hsc103-201.med.utah.edu) |
| 18:18.59 | *** join/#uphpu josephscott (~josephsco@192.0.65.252) |
| 18:18.59 | *** mode/#UPHPU [+o josephscott] by ChanServ |
| 18:35.06 | *** join/#uphpu SledMonkey (~SledMonke@c-174-52-12-69.hsd1.ut.comcast.net) |
| 18:44.14 | *** join/#uphpu hhatfield (~hhatfield@64.147.139.68) |
| 18:44.14 | *** mode/#UPHPU [+v hhatfield] by ChanServ |
| 18:46.05 | *** join/#uphpu stirlingw (~stirlingw@hsc103-201.med.utah.edu) |
| 19:03.12 | *** join/#uphpu macnewbold (~macnewbol@inferno.apxalarm.com) |
| 19:03.12 | *** mode/#UPHPU [+o macnewbold] by ChanServ |
| 19:16.32 | skinner | josephscott: Further digging I see that the initial click on the link, the response I get back contains a cookie. Then the redirect happens, the new request headers at that moment specify the cookie that was originally given, but the response headers return a new cookie and then I'm redirected to the front home page not logged in. I can't figure out why a new cookie is being sent. |
| 19:28.42 | skinner | the only thing I can think of is that referer is not set when I paste the link in the browser |
| 19:28.51 | *** join/#uphpu macnewbold (~macnewbol@inferno.apxalarm.com) |
| 19:28.52 | *** mode/#UPHPU [+o macnewbold] by ChanServ |
| 19:29.02 | skinner | and it is set when using the link from the 3rd party system |
| 19:29.24 | skinner | my phpini settings have: session.referer_check = |
| 19:43.31 | *** join/#uphpu clintberry (~clintberr@205.197.215.90) |
| 19:43.31 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 20:16.04 | *** join/#uphpu undertakingyou (~undertaki@neutroninteractive-xmission.xmission.com) |
| 20:16.04 | *** mode/#UPHPU [+v undertakingyou] by ChanServ |
| 20:18.27 | skinner | Anyone have any advice? Is there something about cookies I might be missing? A php ini setting? |
| 20:21.58 | *** join/#uphpu UtahDave (~boucha@208.187.248.7) |
| 20:21.58 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 20:25.46 | jsmith | skinner: Is it switching from http to https? |
| 20:26.00 | skinner | it is not |
| 20:26.02 | skinner | all http |
| 20:26.05 | jsmith | skinner: Same domain name? |
| 20:26.20 | *** join/#uphpu macnewbold (~macnewbol@inferno.apxalarm.com) |
| 20:26.20 | *** mode/#UPHPU [+o macnewbold] by ChanServ |
| 20:26.30 | skinner | yes |
| 20:26.54 | skinner | two scenarios, one works one doesnt |
| 20:27.16 | skinner | if I paste/type the link in my browser manually, it works. |
| 20:27.30 | skinner | if the link resides on a page on a different domain it doesn't |
| 20:28.01 | skinner | the link is like http://mydomain.com/blah/blah?hash=xxxxxxxxxxxxx |
| 20:28.22 | skinner | the hash is decoded to contain info about a user, which we use to perform a login |
| 20:28.46 | skinner | upon a successful authentication, the user is redirected to a dashboard |
| 20:29.36 | skinner | When clicking the link on a 3rd party site, the login happens successfully, but after the redirect, the cookie is rejected and we no longer have a session |
| 20:30.15 | skinner | its our own version of a single sign on linke |
| 20:30.57 | skinner | I just cant figure out why it works if I paste the link in the browser, but not when access from a page on a separate domain. |
| 20:33.00 | skinner | it feels like it is a php setting I'm missing. |
| 20:34.23 | jsmith | Doesn't sound like a setting to me. |
| 20:34.32 | jsmith | Is one mydomain.com vs the other at www.mydomain.com? |
| 20:35.19 | ninnypants1 | or could something be triggering an instant log out because of part of the url? |
| 20:40.06 | skinner | domains are the same for both requests |
| 20:40.14 | skinner | just the path after the tld is different |
| 20:43.00 | ninnypants1 | what does your set cookie header look like? Is it restricted to a specific path? |
| 20:43.53 | skinner | The first request is this: |
| 20:43.54 | skinner | Set-Cookie:CAKEPHP=e92r9bts165ja8j5ajesmltec4; expires=Fri, 11-Jul-2014 04:38:47 GMT; path=/ |
| 20:44.13 | skinner | The second request made (the redirect) has this in the response: |
| 20:44.14 | skinner | Set-Cookie:CAKEPHP=5lq66209jhos1lluu4ef3e4ta7; expires=Fri, 11-Jul-2014 04:38:48 GMT; path=/ |
| 20:45.51 | skinner | while in the request headers on the second request has this: Cookie:CAKEPHP=e92r9bts165ja8j5ajesmltec4 |
| 20:47.38 | skinner | I can't figure out why the cookie provided with the second request is being replied to with a new cookie. |
| 21:11.19 | *** join/#uphpu supernovia (~Adium@2605:a601:520:c001:7ed1:c3ff:fedd:795b) |
| 21:30.09 | *** join/#uphpu mrkrow69 (~mrkrow69@208.97.57.57) |
| 21:48.21 | *** join/#uphpu stirling_ (~stirlingw@155-99-224-181.uconnect.utah.edu) |
| 22:26.07 | TuxToaster | skinner: is it redirecting to/from https? |
| 22:26.27 | TuxToaster | I don't see a secure flag on the set but it's a thought |
| 22:26.55 | TuxToaster | also makes me wonder if the redirect is calling setcookie() somewhere that is forcing it to create a new one |
| 22:31.25 | skinner | it's all within http |
| 22:31.32 | skinner | but I think I found the issue finallly |
| 22:32.01 | skinner | I was setting referer_check to false, but later, cakephp was overriding it setting it to the hostname |
| 22:58.56 | *** join/#uphpu undertakingyou (~undertaki@c-67-171-113-60.hsd1.ut.comcast.net) |
| 22:58.56 | *** mode/#UPHPU [+v undertakingyou] by ChanServ |