# Multiple error 500 Discourse InvalidAccess in default\_current\_user\_provider.rb
**URL:** https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498
**Category:** Support
**Created:** [2017年十月20日 20:23 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498 "2017-10-20T20:23:56Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@Julian\_Somoza](https://meta.discourse.org/u/Julian_Somoza)
#### Post date: [2017年十月20日 20:23 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498/1 "2017-10-20T20:23:56Z")
Hi!
I start to have a lot of 500 errors (Discourse InvalidAccess) in my installation and try upgrading, downgrading, backuping, etc… The only way to solve the problem was editing the file /var/www/discourse/lib/auth/default\_current\_user\_provider.rb. Modifying the line
` limiter = RateLimiter.new(nil, "cookie_auth_#{request.ip}", COOKIE_ATTEMPTS_PER_MIN ,60)`
By
` limiter = RateLimiter.new(nil, "cookie_auth_#{request.ip}", COOKIE_ATTEMPTS_PER_MIN ,0)`
Anybody know what to do this line?
Thanks in advance!
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2017年十月21日 20:34 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498/4 "2017-10-21T20:34:03Z")
Any thoughts on this @sam? This is an older version.
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [2017年十月21日 22:53 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498/5 "2017-10-21T22:53:30Z")
could be a bug in an early version, but disabling the rate limiter is not a good idea, it is there to protect against attacks.
My guess, IP is not being reported correctly to Discourse cause the site is behind a load balancer and every request looks like it is from the same ip.
---
### Author:  [@Julian\_Somoza](https://meta.discourse.org/u/Julian_Somoza)
#### Post date: [2017年十月23日 19:35 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498/6 "2017-10-23T19:35:16Z")
Thank you so much for the replies. I will check if the IP’s is not arriving correctly and then I will re-enable the recurrent protection.
---
### Author:  [@Julian\_Somoza](https://meta.discourse.org/u/Julian_Somoza)
#### Post date: [2017年十一月3日 17:30 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498/7 "2017-11-03T17:30:01Z")
> [@sam](#):
>
> My guess, IP is not being reported correctly to Discourse cause the site is behind a load balancer and every request looks like it is from the same ip.
You’re right… All the ips are 127.0.0.1 because all my visitors are internals users… The app is working as institutional intranet… I dont find the way to pass the real IP’s to discourse… In the nginx logs the IP’s seems fine.
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [2019年十二月21日 08:42 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498/8 "2019-12-21T08:42:50Z")
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [2020年一月20日 08:42 UTC](https://meta.discourse.org/t/multiple-error-500-discourse-invalidaccess-in-default-current-user-provider-rb/72498/9 "2020-01-20T08:42:59Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.