Topic-icon Facebook login Session kick-out

Active Subscriptions:

None
10 years 9 months ago #54702 by kanoon
Hi,

it occurs sometimes that users got kicked out of their login session with facebook-login after clicking on HOME.
We already had this issue on our old platform with Joomla 2.5. Here it was very often.

Now we built the platform completely new on a new database with fresh extensions and now it can happen again that you get kicked out with Facebook login.
Sometimes it happens within a session of 30 Minutes, sometimes it occurs after 1 Minute.

So I guess the issue lies somewhere in your component. Would be great if you could check.
Thanks!
The topic has been locked.
Support Specialist
10 years 9 months ago #54709 by alzander
Can you make sure that the domain of the URL isn't changing? Sometimes, a user will be navigating your site with www. and one link on your site is hard-coded to not use www. That can change the session data within Joomla which can cause the user to not seem logged in any more.

Thats my best initial guess as to what's happening. If that doesn't help, can you tell use if you have the same issue with standard Joomla logins or other social networks (if you have others configured)?

Thanks,
Alex
The topic has been locked.
Active Subscriptions:

None
10 years 9 months ago #54732 by kanoon
Hi Alex,

Yes, the URL isn't changing. We fixed it in our htaccess...
I had the same thoughts when we were running our old platform on Joomla 2.5. Here we had this issue much heavier. Now, as it happened again (luckily not that frequent) on that fresh platform with Joomla 3.4.4 it scares me a bit.

We only had this issue with the facebook login. I haven't been testing Google+ to be honest.
The topic has been locked.
Support Specialist
10 years 9 months ago #54738 by alzander
I see two different sites that you've run Autotune with in the past. Can you let me know what site you're seeing this issue on and we'll gladly see if we can determine the cause by testing on the front-end.

Thanks,
Alex
The topic has been locked.
Active Subscriptions:

None
10 years 9 months ago #54742 by kanoon
Hi Alex,

Yes, we're only running www.kanoon.de.
On kanoon-music.com we set a redirect to kanoon.de.
So this is the only domain so far...

Cheers,
Max
The topic has been locked.
Support Specialist
10 years 9 months ago #54745 by alzander
As noted above, your site is accessible over www and non-www. A very possible way that the session could be invalidated is by the user going from one version to the other. For instance, the "SHOP-STARTSEITE" link at the top is hard-coded to non-www. So, if a user comes and logs in on the www site and navigates there, the session can go away. It shouldn't, but Joomla (and some servers) can not keep the session on different sub-domains.

I'd highly recommend setting up a redirect from www to non-www (or vice versa) to see if that helps. It's also better for SEO purposes.

Thanks,
Alex
The topic has been locked.
Active Subscriptions:

None
10 years 8 months ago #54769 by kanoon
O.k., thanks Alex.
We'll do that.

Cheers,
Max
The topic has been locked.