WordPress DiscourseConnect client - expired nonce

angus · November 14, 2023, 9:20am

I’m a little unclear as to why this would clear Wordpress’ object cache, as typically adding a random string to a url is used to avoid the browser’s cache. Which query is being cached in Wordpress’ object cache? I’m seeing a non-object-cache reason why that approach might work

github.com/discourse/wp-discourse

lib/sso-client/query-redirect.php

main


      
          		 * To make this work, enter a URL of the form "http://my-wp-blog.com/?request=logout" in the "logout redirect"
          		 * field in your Discourse admin.
          		 */
          		if ( isset( $_GET['request'] ) && 'logout' === $_GET['request'] ) { // Input var okay.
          			wp_logout();
          			wp_safe_redirect( $this->options['url'] );
          
          			exit;
          		}
          
          		if ( empty( $wp->query['discourse_sso'] ) ) {
          
          			return;
          		}
          
          		if ( ! empty( $_GET['redirect_to'] ) ) { // Input var okay.
          			$redirect_to = esc_url_raw( wp_unslash( $_GET['redirect_to'] ) ); // Input var okay.
          		} else {
          			$redirect_to = home_url( '/' );
          		}

However if that’s the case we may need a slightly different tweak. But perhaps I’m missing something?

Topic		Replies	Views
Discourse (as provider) + WP SSO nonce error WordPress	13	1885	May 24, 2019
Sporadic issue wp-discourse/SSO: Nonce has already expired WordPress	22	4283	October 14, 2021
Wordpress as sso client Expired Nonce WordPress	20	3553	May 9, 2017
SSO discourse have error at same session WordPress	9	1558	February 4, 2021
Wordpress SSO Expired nonce WordPress	13	2308	January 2, 2019

WordPress DiscourseConnect client - expired nonce

Related topics