Alovoa / alovoa

Free and open-source dating platform that respects your privacy
https://alovoa.com
GNU Affero General Public License v3.0
444 stars 90 forks source link

[BUG] Unable to login #405

Open Dremor opened 2 weeks ago

Dremor commented 2 weeks ago

Describe the bug

I'm suddenly unable to login on the website. When I attempt to login, I presented a captcha, which I resolved, but nothing happens after that. No error message is shown.

I disabled any tracking protection I had, but nothing changed.

To Reproduce

Try to login with email+password

Expected behavior

Be able to login

Smartphone (please complete the following information):

Additional context

Happens to the Android app (expo) too

Dremor commented 2 weeks ago

Some clues, the app seem to answer to my login attempt by a 302 (Found), with a redirect to "https://alovoa.com/?auth-error" with no further explanation.

Nonononoki commented 2 weeks ago

I could log in normally with a test account. Check your credentials and/or reset your password.

Dremor commented 2 weeks ago

Credential are good, and stored in a password manager. I can't reset my password either, I get a 409 "Conflict" as answer.

Dremor commented 2 weeks ago

According to said answer, my account is not found ("user_not_found"). But I was using it no later than a few day ago, did I get banned a way or another?

Nonononoki commented 2 weeks ago

You shouldn't have been, try re-registering with the same email address.

Dremor commented 2 weeks ago

Re-registering worked. Everything was lost but I least I'm able to log back. Let's hope it won't happen again.

Dremor commented 2 weeks ago

Could it be linked to a bug introduced by this PR: https://github.com/Alovoa/alovoa/pull/402 ?

Nonononoki commented 2 weeks ago

Could it be linked to a bug introduced by this PR: #402 ?

Shouldn't be, unless you never confirmed your email address.

Dremor commented 2 weeks ago

I confirmed my email address, but reading the PR further, I'm a bit uneasy. I'm a C# dev, but I find it a bit risky to purge without double-checking if the search query was indeed correct. Especially since I cannot find said search query in the diff.

Dremor commented 1 week ago

I managed to get in touch with a previous match, she still see my old profile. So it wasn't deleted, but the apps seem unable to find it.