We use DiscourseSSO and sporadically users run into login issues (similar to Sporadic issue wp-discourse/SSO: Nonce has already expired ). I was trying to debug this by adding some extra logging and luckily ran into the issue after a couple of days. To be clear, login works most of the times, just th…

I’m assuming this is happening with logging into WordPress via your Discourse site. If that’s the case, the issue is that the nonce generated by WordPress is expired. This happens on WordPress sites that have an Object Caching enabled. One solution is to disable the Object Cache on any pages that h…

hello! What do you use for the subfolder setup? If you have some kind of web application firewall in front of Discourse, it might be worth it to check for caching issues. In our experience, that is the first thing to rule out.

Thanks for your response Leonardo. We use nginx as our main gateway which sends path based URLs to the nginx inside the Discourse container. I added these two lines at the start of session_controller.rb/sso and session_controller.rb/sso_login if SiteSetting.verbose_discourse_connect_logging …

Pinging the topic, if anyone has any suggestion.

is the site public by any chance? It would help if we can debug it online.

Yes it is, I will send the address in a private message. Update: sent via private message

[image] aarsaa: If we wait for 5 mins or so and try again, then everything starts working fine again Does login break for all users at the same time? Or does it happen at a different time for each user? The fact it starts working again after some time makes me wonder whether there is a cache…

It breaks for all users for that short duration. My first guess was an intermediate node messing with the data, but when I logged cookies from the controller (as explained above) I was able to see the cookies. Is there anything else that I should check as well ?

Sporadic DiscourseSSO login issues with expired nonce

Support SSO

Topic		Replies	Views
Sporadic issue wp-discourse/SSO: Nonce has already expired WordPress	22	3996	October 14, 2021
Session Timeout SSO after rebuild from Backup Support	1	726	September 26, 2021
SSO discourse have error at same session WordPress	9	1474	February 4, 2021
SSO incorrect nonce SSO	4	1436	April 26, 2023
Discourse (as provider) + WP SSO nonce error WordPress	13	1724	May 24, 2019

Sporadic DiscourseSSO login issues with expired nonce

Related topics