Apparent login failure is hiding login success

  • An odd and inconsistent bug is causing apparent login failures for certain users (but the login actually succeeds, in the background). 

    Using the CAS Logins component of Authorizer (v3.7.1, on WP v6.5.2), most users log in without problem. But for a few users, the CAS login steps work fine, but then the screen hangs for ~2 minutes before eventually timing out with a 502 Bad Gateway error from Cloudflare, having never reached the WP dashboard. But what’s particularly puzzling is that if that user navigates back to the WP site from the error page, it turns out they ARE logged into WP, with the WP admin toolbar at the top of the public site, and virtually all of the admin side accessible. The one page that consistently won’t load, even from within the WP admin, is the default dashboard (/wp-admin/index.php or just /wp-admin/).

    Any suggestions for troubleshooting steps to figure out what’s going wrong here?

    ~ Steve McConnell,  UC Berkeley

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Author Paul Ryan

    (@figureone)

    Strange! Does /wp-admin/ remain inaccessible (502 Bad Gateway) for the length of their logged in session, or does it eventually come back? This sounds unrelated to Authorizer, since it normally will just try to redirect after authenticating, and it sounds like the specific redirect to /wp-admin/ is where the fault lies.

    One thing to try is to visit wp-login.php with the redirect_to param pointing somewhere other than wp-admin. Example: https://example.edu/wp-login.php?redirect_to=%2Fsample-page%2F

    Maybe your Cloudflare WAF is blocking access to wp-admin from some IP ranges, affecting these specific users?

Viewing 1 replies (of 1 total)
  • The topic ‘Apparent login failure is hiding login success’ is closed to new replies.