Bug 563341 - Authentication broken - cannot login into PMI
Summary: Authentication broken - cannot login into PMI
Status: RESOLVED FIXED
Alias: None
Product: Community
Classification: Eclipse Foundation
Component: Project Management & Portal (show other bugs)
Version: unspecified   Edit
Hardware: PC Mac OS X
: P1 blocker (vote)
Target Milestone: ---   Edit
Assignee: Christopher Guindon CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-05-19 08:13 EDT by Gunnar Wagenknecht CLA
Modified: 2020-05-19 16:14 EDT (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Gunnar Wagenknecht CLA 2020-05-19 08:13:00 EDT
I'm trying to approve a committer election but I'm unable to do so.

Steps to reproduce:

1. got to 
https://projects.eclipse.org/projects/technology.packaging/elections/election-alexander-kurtakov-committer-eclipse-packaging-project
2. click "log-in" link
3. submit credentials
=> redirect to PMI - not logged in
4. click "log-in" link
=> no ask for credentials and immediate redirect to PMI
=> still not logged in


Issue is the same in anonymous browser window.
Comment 1 Christopher Guindon CLA 2020-05-19 09:20:58 EDT
I can confirm!

The issue is sporadic! If you retry a few times, you will eventually get in!  

I will take a look at this with webmaster once we are done fixing our issues with our builds.
Comment 2 Christopher Guindon CLA 2020-05-19 16:14:53 EDT
I spent most of my afternoon on this but I think we found the problem and a solution!

As you might know, we are using Eclipse OpenID Connect to offer SSO across many of our web properties.


The error in our logs indicated that the token that the server was trying to use was expired.

These code tokens are ment to expire after 30 seconds.

After some debugging, we realized that the time on our 2 vm's nodes were 32 seconds out of sync.

Webmaster did an update to synchronize the time on both api-vv's and the error seems to be gone now!

Gunnar, please re-open if you see this again!