# iOS keeps logging users out when HTTPS site added via HTTP link

**URL:** https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140
**Category:** Bug
**Created:** [April 25, 2018, 11:54am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140 "2018-04-25T11:54:54Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [April 25, 2018, 11:54am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/1 "2018-04-25T11:54:54Z")

</div>

My forum (Patreon sign in) is hosted by discourse and the app seems to kick the user out constantly. I am forced to reconnect every single time I open the app, see screen recording:

[https://global.discourse-cdn.com/meta/original/3X/4/3/437f410a4a1585a2767112f9833881b5edf08df1.MP4](https://global.discourse-cdn.com/meta/original/3X/4/3/437f410a4a1585a2767112f9833881b5edf08df1.MP4)

---

<div class="post-metadata">

### Author: ![slackmoehrle](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/slackmoehrle/32/82215_2.png) [@slackmoehrle](https://meta.discourse.org/u/slackmoehrle)
#### Post date: [April 25, 2018, 12:31pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/2 "2018-04-25T12:31:24Z")

</div>

I also am experiencing this. I recently turned on https for our discourse site so I thought that might have something to do with it, but it does work maybe 1 out of 50 times I have tried. I get into the forums. Next entry into the app I have to authorize again and it goes back to re-prompting over and over to authorize again.

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [April 25, 2018, 2:55pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/3 "2018-04-25T14:55:02Z")

</div>

Any chance you can tell me when you started experiencing this please?

---

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [April 25, 2018, 3:22pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/4 "2018-04-25T15:22:27Z")

</div>

> [@slackmoehrle](#):
>
> I also am experiencing this. I recently turned on https for our discourse site so I thought that might have something to do with it

That’s interesting - the same situation happens with @mpj - you’ll notice that it tries to load the site via HTTP first then gets redirected to HTTPS.

If you instead add the site as HTTPS does that resolve the problem?

---

<div class="post-metadata">

### Author: ![slackmoehrle](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/slackmoehrle/32/82215_2.png) [@slackmoehrle](https://meta.discourse.org/u/slackmoehrle)
#### Post date: [April 25, 2018, 3:43pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/5 "2018-04-25T15:43:03Z")

</div>

> [@supermathie](#):
>
> If you instead add the site as HTTPS does that resolve the problem?

so far, yes. I’ll keep trying throughout today, quitting the app, going back in, restarting my phone, etc.

**Edit:** After several hours of testing off an on, it appears that this fixed my issue.  
**Note:** I had switched from http to https last week and uses an nginx rule to direct http to https.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [April 25, 2018, 9:20pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/6 "2018-04-25T21:20:52Z")

</div>

Yes we got to fix this then … this is magic https handling we have that needs fixing.

---

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [April 28, 2018, 8:06am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/8 "2018-04-28T08:06:59Z")

</div>

Good to hear that it’s recognized as an issue. I’ll hold off promoting the app to my members for now.

---

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [May 17, 2018, 10:04am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/9 "2018-05-17T10:04:10Z")

</div>

I understand software development is complex, but is there any hope of having this fixed soon? A working app is, after all, one of the selling points for the discourse hosting.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [May 17, 2018, 10:45am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/10 "2018-05-17T10:45:31Z")

</div>

You have a lot of users entering the site as `http://example.com` instead of `https://example.com` in the app?

---

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [May 17, 2018, 11:13am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/12 "2018-05-17T11:13:54Z")

</div>

> [@codinghorror](#):
>
> You have a lot of users entering the site as `http://example.com` instead of `https://example.com` in the app?

Oh, is that why it doesn’t work? Which one should they use?

edit: I just went through the flow - I would imagine that they most natural way for them to act when adding it in the app would be to type “[funfunforum.com](http://funfunforum.com)” into the app, which I’ve set up as 301 redirect to [https://www.funfunforum.com](https://www.funfunforum.com) via my registrar. ([www.funfunforum.com](http://www.funfunforum.com) is the CNAME record pointing to [funfunforum.hosted-by-discourse.com](http://funfunforum.hosted-by-discourse.com).)

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [May 17, 2018, 8:09pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/13 "2018-05-17T20:09:04Z")

</div>

I will try to make an iOS release next week (at least submit the build).

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [May 28, 2018, 1:18pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/14 "2018-05-28T13:18:44Z")

</div>

I have had an issue not related to this one preventing me from submitting build friday, still on it.

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [May 31, 2018, 1:54pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/15 "2018-05-31T13:54:42Z")

</div>

Quick update for anyone following this, I have uploaded a build to apple and sent a test build to @mpj so he can try it

---

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [June 1, 2018, 9:05am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/16 "2018-06-01T09:05:50Z")

</div>

@j.jaffeux Hi joffrey! I’ve tried the new app and the issue unfortunately remains. Screen capture:

> **[New video · Friday, Jun 1, 2018 🎬](https://photos.google.com/share/AF1QipOBi7xLKp-dI55XOlkQoaXVJOqervPOT3Nc0b-Tla-5dlRhMlMrgUFBff8iB0jyUQ?key=UUxuSFJBNkMtd3pzSTRZdGhORU1OOHFDV0UwNUVR)**

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [June 1, 2018, 10:24am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/17 "2018-06-01T10:24:12Z")

</div>

Ok thanks for trying and the video. I will find a way 😛

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [June 4, 2018, 10:17am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/18 "2018-06-04T10:17:21Z")

</div>

Pushed an update which should work 🤞

---

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [June 4, 2018, 10:39am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/19 "2018-06-04T10:39:54Z")

</div>

Unfortunately, it does not, for me. ☹ New screencap:  
[Dropbox - Error - Simplify your life](https://www.dropbox.com/s/5b4fe7wqqkbgtwz/Video%202018-06-04%2012%2034%2037.mp4?dl=0)  
[Dropbox - Error - Simplify your life](https://www.dropbox.com/s/5b4fe7wqqkbgtwz/Video%202018-06-04%2012%2034%2037.mp4?dl=0)

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [June 4, 2018, 10:46am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/20 "2018-06-04T10:46:27Z")

</div>

can you try to uninstall the previous one before please ?

---

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [June 4, 2018, 11:04am UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/21 "2018-06-04T11:04:34Z")

</div>

Okay, tried that. Problem still remains:

`https://www.dropbox.com/s/tc30jelr81kkckb/Video%202018-06-04%2013%2000%2020.mp4?dl=0`

I am going to PM you the password to that test account so that you can reliably replicate.

---

<div class="post-metadata">

### Author: ![mpj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpj/32/119759_2.png) [@mpj](https://meta.discourse.org/u/mpj)
#### Post date: [June 4, 2018, 1:58pm UTC](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140/22 "2018-06-04T13:58:49Z")

</div>

The latest version works!!!

[Next page](https://meta.discourse.org/t/ios-keeps-logging-users-out-when-https-site-added-via-http-link/86140.md?page=2)
