search

aaronpk / indielogin.com

Sign in with your domain name
https://indielogin.com
MIT License
149 stars 24 forks source link

"The session expired" #108

Closed jphastings closed 10 months ago

jphastings commented 1 year ago

Hi folks, I'm getting a "The session expired" every time I try to authenticate with PGP.

(This is the same issue mentioned by a number of people posting on an unrelated issue, so I figured I'd break it out into its own issue.)

My reproducing actions are:

  1. Visit IndieLogin.com and enter my domain
  2. Select the string to be signed with PGP and use GPG Suite's "services" for mac os to sign in-place Screenshot 2023-07-25 at 21 20 19
  3. I receive a message: "The session expired" Screenshot 2023-07-25 at 21 23 38

I'm certain it's not an issue with this signing method, as it functions perfectly on indieauth.com. Can you help?

aaronpk commented 1 year ago

hmm, you don't have any browser extensions that might be blocking cookies do you?

jphastings commented 1 year ago

It's definitely possible (I'm using Arc — I've since set my site to use indieauth.com instead, so I'm no longer easily able to test this, but I'll swap back and see whether it's still exhibiting in a more relaxed browser!

aaronpk commented 10 months ago

I'm not sure how you were able to set your site to use this, since it is not the same kind of identity provider as indieauth.com is. You should only end up at indielogin.com from a website that uses it to sign users in, like indieweb.org.