Django sessions abandoned in first tab when clicking link in second -


don't know if specific django, site 1 i've experienced with, , don't think i'm doing special session data (just using old-school database backend).

when user logs in (in tab a) , opens new tab (tab b) on same domain, cookie carries on second tab. however, if user clicks link in tab b, either refreshes tab or clicks link in tab, he's instantly logged out.

i've been googling around issue ages have had no luck, appreciate anyone's help. apologies if fundamental thing.

middleware_classes = (     'django.middleware.cache.updatecachemiddleware',     'bambu.sites.middleware.domainredirectmiddleware',     'nymbol.utils.middleware.requirehttpsmiddleware',     'django.middleware.common.commonmiddleware',     'django.contrib.sessions.middleware.sessionmiddleware',     'django.middleware.locale.localemiddleware',     'django.middleware.csrf.csrfviewmiddleware',     'django.contrib.auth.middleware.authenticationmiddleware',     'django.contrib.messages.middleware.messagemiddleware',     'maintenancemode.middleware.maintenancemodemiddleware',     'bambu.analytics.middleware.analyticsmiddleware',     'bambu.enqueue.middleware.enqueuemiddleware',     'bambu.minidetect.middleware.minidetectmiddleware',     'nymbol.utils.middleware.userplanmiddleware',     'nymbol.manager.middleware.apilegacymiddleware',     'django.middleware.cache.fetchfromcachemiddleware' )
  • bambu.sites.middleware.domainredirectmiddleware redirects visitors correct domain, site has number of alias domains
  • nymbol.utils.middleware.requirehttpsmiddleware redirects users of urls ssl versions of same)
  • maintenancemode.middleware.maintenancemodemiddleware displays 503 message when site being deployed after commit , push
  • bambu.analytics.middleware.analyticsmiddleware enqueues analytics javascript across requests
  • bambu.enqueue.middleware.enqueuemiddleware allows views , template tags enqueue css , javascript
  • bambu.minidetect.middleware.minidetectmiddleware detects whether browser mobile or not
  • nymbol.utils.middleware.userplanmiddleware stores payment plan user on in request object (as governs site-wide permissions)
  • nymbol.manager.middleware.apilegacymiddleware changes url pattern in 1 particular url (absolutely no bearing in issue)

it turns out issue having had nothing django, instead due insecure image urls being delivered on tls (ssl basically).

this bad explanation of issue, seemed when browser - chrome or firefox - detected http:// url being referenced secure url, abandoned session next time hit refresh or clicked link, i'd taken login page cookie no longer valid.

as say, not how it's going down, that's practical upshot, , correcting urls (which of course best-practice anyway) sorted issue completely.


Comments

Post a Comment

Popular posts from this blog

apache - Remove .php and add trailing slash in url using htaccess not loading css -

i have add following code htaccess file removing .php extension , add trailing slash urls. worked fine reduced page loading speed , css code not loading @ all. pages ugly. please help rewriteengine on rewritebase / ## hide .php extension snippet # externally redirect /dir/foo.php /dir/foo rewritecond %{the_request} ^[a-z]{3,}\s([^.]+)\.php [nc] rewriterule ^ %1/ [r,l] # add trailing slash rewritecond %{request_filename} !-f rewritecond %{request_uri} !/$ rewriterule . %{request_uri}/ [l,r=301] # internally forward /dir/foo /dir/foo.php rewritecond %{request_filename} !-d rewritecond %{request_filename}.php -f rewriterule ^(.*?)/?$ $1.php [l] we can rewrite urls using .htaccess files. before writing in .htaccess files need verify kind of server using. can check server adding a <?php phpinfo(); ?> in php page. ensure mod_rewrite module enabled in apache server. can identified checking phpinfo included page. common methods used url rewriting follows ...
Read more

inno setup - TLabel or TNewStaticText - change .Font.Style on Focus like Cursor changes with .Cursor -

is possible change .font.style on focus tlabel or tnewstatictext happens cursor when use .cursor ? there no built-in support track mouse hovering in inno setup @ time. however, intercepting window procedure of controls can track yourself. following example need innocallback library: [setup] appname=my program appversion=1.5 defaultdirname={pf}\my program outputdir=userdocs:inno setup examples output [files] source: "innocallback.dll"; destdir: "{tmp}"; flags: dontcopy [code] #ifdef unicode #define aw "w" #else #define aw "a" #endif const gwl_wndproc = -4; wm_mousemove = $0200; type wparam = uint_ptr; lparam = longint; lresult = longint; twindowproc = function(hwnd: hwnd; umsg: uint; wparam: wparam; lparam: lparam): lresult; function setcapture(hwnd: hwnd): hwnd; external 'setcapture@user32.dll stdcall'; function releasecapture: bool; external 'releasecapture@user32.dll stdcall'; func...
Read more