Hi. We have this sporadic issue a couple of times per month where: a user signs up in WordPress they go to our Discourse forum and press the blue Login button the page hangs for several seconds (about 30) and then we get a 502 bad gateway error and the person is not logged in to Discourse nor is a…

Thanks @simon and @bekircem for the replies. So I came back 3 hours later and tried to reproduce the problem again and lo and behold it worked fine this time – i.e. Discourse created this user’s account with no issues. It’s strange, between the two WordPress+Discourse sites I manage we have a doze…

[画像] lkramer: Where would I find the more verbose log information for future reference? Go to Admin/Logs/Error Logs and then look for a date and time that’s close to when the error occurred. The SSO logs all start with the phrase Verbose SSO log.

Ah, I see, at the bottom of the screen. For the timestamp when this issue happened a few hours ago, the verbose SSO log contents are pasted below. I replaced anything sensitive with dashes but all those values looked normal. I just now noticed that when I search my those Discourse logs for “Nonce h…

If you look back in the logs from there, do you see the same nonce being used for another SSO login attempt? You can use your browser’s search to look for it. A nonce shouldn’t appear more than twice in the logs - once for Started SSO process nonce and once if the nonce was used to login a user. Th…

OK I checked and the nonces are not being duplicated for any other login attempts. Whenever this issue is logged I see a pair of events like I pasted below. They are often timestamped a minute apart (the seconds aren’t logged) which makes me wonder if Discourse is for some reason taking a really lo…

[画像] lkramer: Does the code have something in it that says “this nonce must be cross-checked within X seconds?” Yes, the nonce is valid for 10 minutes. From the log entries that you posted, the nonce expiry time isn’t the issue. I’ll look into this some more and see if I can find anything. …

Another total long shot idea here – Is there a limit to the number of API interactions per hour? Just asking because this issue seems to resolve if I just try again several minutes or hours later.

[画像] lkramer: Is there a limit to the number of API interactions per hour? Yes, there is a limit of 60 API requests per minute. This limit shouldn’t be affecting regular SSO login though. It will affect requests made to the sync_sso route - those requests include the API key.

Hi @simon . I’ve been digging into this issue recently because it’s happening a lot on one of our sites. (It’s not related to what @jesselperry mentioned but thank you, @jesselperry , for the advice!) I put a bunch of debugging statements into /wp-discourse/lib/sso-provider/discourse.php and it look…

wp-discourse/SSO の断続的な問題：Nonce が既に期限切れ

サポート WordPress

jesselperry (Jesse Perry) 2018 年 10 月 11 日午後 4:54 13

This is an old-ish topic, but just wanted to share that I was having this same error message, but it was connected to the root issue that’s solved here: Imported Discourse -> Wordpress Users Get Error

トピック		返信	表示
Discourse (as provider) + WP SSO nonce error WordPress	13	1724	2019 年 5 月 24 日
Wordpress as sso client Expired Nonce WordPress	21	3297	2024 年 6 月 8 日
WordPress DiscourseConnect client - expired nonce WordPress	13	943	2023 年 12 月 11 日
Wordpress SSO Expired nonce WordPress	14	2146	2019 年 2 月 1 日
Sporadic DiscourseSSO login issues with expired nonce SSO	10	1324	2023 年 12 月 13 日

wp-discourse/SSO の断続的な問題：Nonce が既に期限切れ

関連トピック