oscurrencyVRL / oscurrency

Affero licensed Mutual Credit/Time Bank software, operational in statewide b2b system
Other
15 stars 2 forks source link

Login Bug? Related to Credit Card #193

Closed amykirschner closed 7 years ago

amykirschner commented 7 years ago

Possible Bug:

User contacts me to tell me can't login. I reset password. Neither he or I can login into his account with new password I am logged in to other accounts. Just his is buggy.

Error message on browser: The mighty-sea-9942.herokuapp.com page isn’t working mighty-sea-9942.herokuapp.com redirected you too many times. Try clearing your cookies. ERR_TOO_MANY_REDIRECTS

I turn off: Credit Card required Update Credit Card on his profile from admin dashboard. Magic - I can login as him.

**I got no error report on this. I can't confirm it's happening to anyone else right now but maybe they aren't telling me.

ziyan-junaideen commented 7 years ago

A user who needs to set his/her card will get redirected to the payment page. It seems like there is some other logic else where that redirects the user to another.

Checking this issue.

ziyan-junaideen commented 7 years ago

@amykirschner : I see how this can happen. I can't be certain why it is the cause, i will patch that vulnerability.

Clearing cookies for the domain name with Ctrl + Shift + Delete will generally fix it.

ziyan-junaideen commented 7 years ago

@amykirschner : This should be fixed. Also patched an issue where if in a similar situation, a customer will not be able to logout the ordinary way.

amykirschner commented 7 years ago

@ziyan-junaideen thank you!