search

Tmeister / wp-api-jwt-auth

A simple plugin to add JSON Web Token (JWT) Authentication to WP REST API
GNU General Public License v2.0
558 stars 161 forks source link

Sometimes it shows i'm logged in, sometimes not #129

Closed botoxparty closed 1 year ago

botoxparty commented 5 years ago

Hey,

I'm having an issue where if I had just logged in, then everything works fine, but sometimes if I close the window or return to the site at a later time then WP API doesn't recognise me as a logged in user.

e.g. I have an endpoint that returns the current logged in user's details, sometimes it will return null. The headers are definitely being passed.

Having a hard time debugging this, could the API be using cookies or something and expiring them? This could be an issue with logging into the admin panel as well as through JWT Auth at the same time as the only users I have tried are admin users.

Any ideas or suggestions?

jon1wt commented 5 years ago

I have the same idea, I think you don't storage the token on login, I try to make something and the basic idea and not the best one, I have an script with an ajax to pass the data on login and saving the token on localStorage for example:

add_action('login_footer', 'get_token');
function get_token() { ?>
<script>
your script here
you can get the data with jquery
user = $("#user_login").val();
pass = $("#user_pass").val(); 
</script>
<?php}

it is not the best way but for test its working for me

botoxparty commented 5 years ago

@jon1wt Sorry but I'm not really sure what you're talking about.

Of course i'm storing my tokens in localstorage on login? I'm using Angular so i'm not writing any jquery/ajax stuff.

I feel like this issue is more that WP is decommissioning my tokens once the user logs in somewhere else or something.

jon1wt commented 5 years ago

Sorry, I understood wrong, I think if the same user requests a new token the previous one is invalid, it may be that or that the session is expiring very soon

botoxparty commented 5 years ago

Yeah something seems to be invalidating the sessions but i'm not sure what it could be.

Will wait for a response from a dev

jon1wt commented 5 years ago

yes, while you wait, try to change the expiration time and experiment with that

botoxparty commented 5 years ago

The default is 7 days and I haven't changed it.

botoxparty commented 5 years ago

Okay so i've been testing it by using the front-end in one browser, then using wp-admin in another browser and I no longer experience this issue.

It must be some kind of cookie conflict. Will keep digging.