We have a problem with keeping user logged in. We connect discourse to our app with sso. Login Success and redirect to discourse click some board popup “you were logged out” our guess are below _forum_session value in Session storage keep changing when we click the board So previous sessionkey, and new generated session key was not match sometime. How to manage forum_session value? or How to control sequence of generating _forum_session? What makes this popup out?

I don’t know what to provide to solve this problem. Don’t hesitate to ask me

Thanks for your help. site is same as below. [image] OVERDARE Forum

version: 3.5.0.beta1 deployment type: self-hosted login type: Discourse SSO Connect Hi all, I’m currently running a self-hosted Discourse instance within our infrastructure. Everything works fine up to the point of logging in via the Discourse SSO Connect method (we use our own custom account server for authentication). However, we’re encountering an issue where, during a search operation, a “You were logged out” popup appears randomly. This only happens in the production environment — not in development or staging. We haven’t modified any of the Discourse open source code. Our assumption is that the _forum_session cookie is supposed to be updated with each API call, but for some reason, this update fails in production. As a result, the current session cookie becomes invalid and leads to a logout. If anyone has experienced a similar issue or has insights into what’s going on, I’d really appreciate your help. We’re hoping to resolve this as soon as possible. Thanks!

Could this be related to [image] Sometimes toast the message "you were logged out" SSO We have a problem with keeping user logged in. We connect discourse to our app with sso. Login Success and redirect to discourse click some board popup “you were logged out” our guess are below _forum_session value in Session storage keep changing when we click the board So previous sessionkey, and new generated session key was not match sometime. How to manage forum_session value? or How to control sequence of generating _forum_session? What makes this popup out? ?

Yes, thank you for sharing. I’d like to understand in what cases the forum_session update might fail. From what I can tell, it gets updated every time I enter a page via the Set-Cookie header in the response. We haven’t changed any related logic, so I’m unsure why it occasionally doesn’t update.

No need to open a new topic if there already is one (I presume it’s even about the same site). You haven’t updated for over 4.5 months - please start by updating your site to latest tests-passed (3.5.0.beta8-dev) and see if that resolves the issue.

@RGJ Thanks for your response. It’s a bit strange — we’re running three environments with the same version (3.5.0.beta1), but this issue only occurs in the production environment. The other two environments (development and staging) are working fine, so I don’t think it’s a version-related issue. I’m wondering, is this the first time this issue has been reported? Have there been any similar reports in the past?

[image] Wonjong: so I don’t think it’s a version-related issue. And to rule that out, you should update first. Also, beta1 contains a number of security vulnerabilities, so you want do to this anyway :wink:

Sometimes toast the message "you were logged out"

Product Support SSO

sam (Sam Saffron) July 7, 2025, 3:17am 4

sorry, slipping this into support, can you explain how your site is deployed?

Topic		Replies	Views
Issues using SSO in custom web app Development	10	1713	January 9, 2018
SSO login & logout issues SSO	2	3642	August 12, 2016
Discourse members being logged out - how to fix? Product Support	11	1894	May 25, 2020
How to sync logout with SSO or Browser session? Product Support	3	1927	September 8, 2020
Discourseconnect logout issues Product Support	1	1025	February 25, 2022

Sometimes toast the message "you were logged out"

Related topics