search

SAP / gigya-android-sdk

SAP CDC (Gigya) android sdk for mobile
Apache License 2.0
19 stars 13 forks source link

Duplicate nonce errors from Gigya.login after password reset #37

Closed HDBAGORIAR closed 9 months ago

HDBAGORIAR commented 2 years ago

Error: ["callId": 6e37d8e0aa4a4a8c827c6db252bed19e, "time": 2022-06-28T07:29:56.923Z, "statusReason": Forbidden, "statusCode": 403, "apiVersion": 2, "errorDetails": Duplicate nonce, "errorCode": 403004, "errorMessage": Duplicate nonce]

I experience the issue in latest gigya ios sdk.

This issue arise after the user reset the password. And even after launching the application again we are getting the same error until we delete the application and reinstall the new one.

gigya.initFor(apiKey: xxxx, apiDomain: yyyy) is called every time user launches the application, to initiate the gigya sdk. So, even if the user relaunches the application the error is same.

If after password reset success call, we call gigya logout then the issue does not arise. But iam still unclear if no session is created during the reset process OR we need to proceed in this way

Please let us know the fixes.

tal-mi commented 2 years ago

Hi, Is the reset password done via the mobile or web portal? If this is an iOS issue please open it here: https://github.com/SAP/gigya-swift-sdk

HDBAGORIAR commented 2 years ago

Hi Tal,

Reset password is done via web portal.

Reset password link is received on the email. From there we navigated to the browser (Desktop). When password is reset from the portal and we try to login in the application(On Mobile) we are getting the error.

NOTE: This error are some time observed too often.

Regards, Ravi Kant

From: Tal Mirmelshtein @.> Date: Wednesday, 6 July 2022 at 12:21 AM To: SAP/gigya-android-sdk @.> Cc: Bagoria, Ravi Kant @.>, Author @.> Subject: Re: [SAP/gigya-android-sdk] Duplicate nonce errors from Gigya.login after password reset (Issue #37) You don't often get email from @.*** Learn why this is importanthttps://aka.ms/LearnAboutSenderIdentification

Hi, Is the reset password done via the mobile or web portal? If this is an iOS issue please open it here: https://github.com/SAP/gigya-swift-sdk

— Reply to this email directly, view it on GitHubhttps://github.com/SAP/gigya-android-sdk/issues/37#issuecomment-1175387465, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AWHFCJZR56UZ6PTSBSOEPJTVSR7ZTANCNFSM52UYWJIA. You are receiving this because you authored the thread.Message ID: @.***>

This communication (including any attachments) is for the use of the intended recipient(s) only and may contain information that is confidential, privileged or otherwise legally protected. Any unauthorized use or dissemination of this communication is prohibited. If you have received this communication in error, please immediately notify the sender by return e-mail message and delete all copies of the original communication. Thank you for your cooperation.

tal-mi commented 9 months ago

Duplicate nonce issues are derived from backend changes. The mobile SDKS do not issue the same nonce to the server. If this still persists, please open a [support case](Via SAP standard support) and we will make sure it is directed to the correct team.