Forced logoff immediately upon login

Question

Forced logoff immediately upon login

scienceplease opened this issue 4 years ago · comments

As of yesterday, every login attempt to https://app.astralapp.com results in an immediate forced logoff. This is regardless of browser and after clearing cache.

With developer tools open I can see a GET to https://app.astralapp.com/api/stars/github? returning a 500 error.

Portions of the API that don't seem to rely on Github (e.g. https://app.astralapp.com/api/stars return without issue.

As far as I can tell what I am experiencing is identical to a previously closed issue (#281) from September 2019. The solution appears to be clearing out the current auth token. Is this something a user can do on his/her own?

Collin Henderson · Answer 1 · Sun Apr 19 2020 05:17:50 GMT+0800 (China Standard Time)

Hey, thanks for the report.

Normally you can clear your access token in the user settings modal by using the Revoke Access button but since you can't log in, I can manually clear it for you

Edit: I cleared it out for you, let me know if you run into any more problems logging in.

scienceplease · Answer 2 · Sun Apr 19 2020 11:07:26 GMT+0800 (China Standard Time)

Thanks, I just tried logging in again and the behavior hasn't changed as far as I can tell.

Collin Henderson · Answer 3 · Sun Apr 19 2020 23:16:07 GMT+0800 (China Standard Time)

Hm, that's odd. I'm still not seeing an access token on your account. I would try revoking access to Astral in your own GitHub settings, and then trying to re-log in to Astral.

scienceplease · Answer 4 · Sun Apr 19 2020 23:50:02 GMT+0800 (China Standard Time)

That did the trick! I'm able to log in without issue now.

Just for future reference, revoking and re-authorizing ("Settings" > "Applications" > "Authorized OAuth Apps") was one if the first things I tried before you cleared my token server-side, but on its own it was not enough.

rootkit · Answer 5 · Tue May 19 2020 11:09:21 GMT+0800 (China Standard Time)

Hm, that's odd. I'm still not seeing an access token on your account. I would try revoking access to Astral in your own GitHub settings, and then trying to re-log in to Astral.

i have the same issue ,but i still can not login in after revoking and re-authorizing ("Settings" > "Applications" > "Authorized OAuth Apps")

Collin Henderson · Answer 6 · Tue May 19 2020 21:03:17 GMT+0800 (China Standard Time)

@FunnyWolf Thanks, I'm actually running into the same thing on my own account as well! I'm still not sure what's going on, but I'll dig a little to try and find the root cause.

Edit: I've cleared your access token in the meantime.
Edit again: The issue is definitely caused by GitHub rejecting the access tokens. I'm really not sure why this is happening.

Collin Henderson · Answer 7 · Wed May 20 2020 00:44:13 GMT+0800 (China Standard Time)

I just pushed a change that clears your access token if GitHub ever ends up returning a 401 — this should at least prevent the loop of trying to login and immediately getting kicked back out.