Bug 563341

Summary:	Authentication broken - cannot login into PMI
Product:	Community	Reporter:	Gunnar Wagenknecht <gunnar>
Component:	Project Management & Portal	Assignee:	Christopher Guindon <chris.guindon>
Status:	RESOLVED FIXED	QA Contact:
Severity:	blocker
Priority:	P1	CC:	chris.guindon, jonah, wayne.beaton, webmaster
Version:	unspecified
Target Milestone:	---
Hardware:	PC
OS:	Mac OS X
Whiteboard:

Description Gunnar Wagenknecht

2020-05-19 08:13:00 EDT

I'm trying to approve a committer election but I'm unable to do so.

Steps to reproduce:

1. got to 
https://projects.eclipse.org/projects/technology.packaging/elections/election-alexander-kurtakov-committer-eclipse-packaging-project
2. click "log-in" link
3. submit credentials
=> redirect to PMI - not logged in
4. click "log-in" link
=> no ask for credentials and immediate redirect to PMI
=> still not logged in


Issue is the same in anonymous browser window.

Comment 1 Christopher Guindon

2020-05-19 09:20:58 EDT

I can confirm!

The issue is sporadic! If you retry a few times, you will eventually get in!  

I will take a look at this with webmaster once we are done fixing our issues with our builds.

Comment 2 Christopher Guindon

2020-05-19 16:14:53 EDT

I spent most of my afternoon on this but I think we found the problem and a solution!

As you might know, we are using Eclipse OpenID Connect to offer SSO across many of our web properties.


The error in our logs indicated that the token that the server was trying to use was expired.

These code tokens are ment to expire after 30 seconds.

After some debugging, we realized that the time on our 2 vm's nodes were 32 seconds out of sync.

Webmaster did an update to synchronize the time on both api-vv's and the error seems to be gone now!

Gunnar, please re-open if you see this again!