Session Timeout SSO dopo ricostruzione da Backup

Supporto
1

Sto cercando di spostare il mio Discourse su una nuova macchina e il ripristino da un backup funziona, ma non riesco ad accedere (né come amministratore né come utente) perché ricevo messaggi di ‘Session Timeout’ ogni volta. Qualcuno può aiutarmi a diagnosticare il problema, dato che non so dove cercare i log o le impostazioni corrette?

Finora ho provato a cancellare la cache e i cookie del browser, a reimpostare i fusi orari dell’host, del contenitore Docker e del provider SSO allo stesso fuso orario, a disabilitare DiscourseConnect tramite la console rails e a provare ad accedere con login locali.

Grazie!

2

Sono ancora bloccato con questo problema. Ricevo sempre messaggi SSO “Nonce has expired” e non so come fare il debug. Come provider SSO utilizzo un’istanza Nextcloud con questa app, che ha sempre funzionato correttamente.

Posto qui un esempio del file production.log:

Started GET "/" for [...] at 2021-09-26 21:13:14 +0200
Processing by ListController#latest as HTML
Redirected to [...]/session/sso
Filter chain halted as :redirect_to_login_if_required rendered or redirected
Completed 302 Found in 4ms (Allocations: 875)
Started GET "/session/sso" for [...] at 2021-09-26 21:13:14 +0200
Processing by SessionController#sso as HTML
Verbose SSO log: Started SSO process

add_groups: 
admin: 
moderator: 
avatar_force_update: 
avatar_url: 
bio: 
card_background_url: 
email: 
external_id: 
groups: 
locale: 
locale_force_update: 
logout: 
name: 
nonce: c6d02e05adc989f6b4729988bb781834
profile_background_url: 
remove_groups: 
require_activation: 
return_sso_url: [...]/session/sso_login
suppress_welcome_message: 
title: 
username: 
website: 
location: 
Redirected to [Nextcloud]/index.php/apps/discoursesso?sso=bm9uY2U9YzZkMDJlMDVhZGM5ODlmNmI0NzI5OTg4YmI3ODE4MzQmcmV0dXJuX3Nzb191cmw9aHR0cHMlM0ElMkYlMkZmb3J1bXMuZmFocndlcmsuaW8lMkZzZXNzaW9uJTJGc3NvX2xvZ2lu&sig=c71b843f658cbb948877ae1981c4b0d580fdc855d10e3d53d07150cfe9b97fb2
Completed 302 Found in 23ms (Allocations: 1696)
ActionController::RoutingError (No route matches [GET] "/service-worker-c8000968830b6f6bd33f1e842dffdd569664119d449f93dc7d428d963a71635d.js")
config/initializers/100-quiet_logger.rb:23:in `call'
config/initializers/100-silence_logger.rb:31:in `call'
lib/middleware/enforce_hostname.rb:23:in `call'
lib/middleware/request_tracker.rb:187:in `call'
Started GET "/session/sso_login?sso=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&sig=9647e86fcb319ad785979a0c91d768f9c406bf305069d2fe2ccd68d10fbb811b" for [...] at 2021-09-26 21:13:38 +0200
Processing by SessionController#sso_login as HTML
  Parameters: {"sso"=>"bm9uY2U9YzZkMDJlMDVhZGM5ODlmNmI0NzI5OTg4YmI3ODE4MzQmZXh0ZXJuYWxfaWQ9bWFyaXVzNTYmZW1haWw9bWFyaXVzNTYlNDBwcnRyYy5uZXQmdXNlcm5hbWU9bWFyaXVzNTYmbmFtZT01NitNYXJpdXMmdGl0bGU9JmFkZF9ncm91cHM9RGF0ZW5zY2h1dHolMkNJVC1BRyUyQ0t1cmllciUyQWluJTJDTWFya2V0aW5nLUFHJTJDVmVybmV0enVuZ3MtQUclMkNaaWVsZS1TdHJhdGVnaWVuLUFHJTJDJnJlbW92ZV9ncm91cHM9QWx1bW5pJTJDQXJiZWl0c3BsYXR6JTJDQXJiZWl0c3NjaHV0eiUyQ0F1dG8tQUclMkNBd2FyZW5lc3MtQUclMkNCdWNoaGFsdHVuZ3MtQUclMkNDaGVmJTJDRGlzcG8tQUclMkNGdW5rZW4tQUclMkNHYXN0JTJDSHViLUFHJTJDS29sbGVrdGl2aXN0YSUyQ0xhc3RlbnJhZC1BRyUyQ1BlcnNvbmFsLUFHJTJDUGxlbnVtcy1BRyUyQ1Byb2t1cmlzdGVuJTJDU09yZ2EtQUclMkNTY2hpY2h0cGxhbi1BRyUyQ1N0cnVrT3JnYS1BRyUyQ1N5c3RlbW51dHplciUyQ1ZlcmVpbiUyQ1ZlcmVpbnMtQUclMkNWZXJlaW5zdm9yc3RhbmQlMkNhZG1pbiUyQyZncm91cHM9RGF0ZW5zY2h1dHolMkNJVC1BRyUyQ0t1cmllciUyQWluJTJDTWFya2V0aW5nLUFHJTJDVmVybmV0enVuZ3MtQUclMkNaaWVsZS1TdHJhdGVnaWVuLUFHJTJDJmF2YXRhcl9mb3JjZV91cGRhdGU9", "sig"=>"9647e86fcb319ad785979a0c91d768f9c406bf305069d2fe2ccd68d10fbb811b"}
Verbose SSO log: Nonce has expired

add_groups: [...]
admin: 
moderator: 
avatar_force_update: 
avatar_url: 
bio: 
card_background_url: 
email: [...]
external_id: [...]
groups: [...]
locale: 
locale_force_update: 
logout: 
name: [...]
nonce: c6d02e05adc989f6b4729988bb781834
profile_background_url: 
remove_groups: [...]
require_activation: 
return_sso_url: 
suppress_welcome_message: 
title: 
username: [...]
website: 
location: 
  Rendered session/sso_login.html.erb within layouts/no_ember (Duration: 0.9ms | Allocations: 64)
  Rendered layout layouts/no_ember.html.erb (Duration: 54.8ms | Allocations: 5736)
Completed 419  in 73ms (Views: 56.7ms | ActiveRecord: 0.0ms | Allocations: 7600)

Sono passati solo 24 secondi tra l’avvio del processo SSO/creazione del nonce e la fornitura dei parametri SSO. Qualcuno ha qualche idea su dove cercare errori/problemi o per ottenere informazioni di debug migliori?