search

pwm-project / pwm

pwm
Other
894 stars 251 forks source link

New User Verification emails redirects too many times #536

Open ckazimie opened 4 years ago

ckazimie commented 4 years ago

Describe the bug In the New User Registration module, the email to verify the user's email address contains a link. click here, to continue with the account registration. However, when clicked a page with error message is shown saying

This page isn’t working **** redirected you too many times. Try clearing your cookies. ERR_TOO_MANY_REDIRECTS

When I then switch to the address field in the browser and press Enter the continuation page is opened as expected, however.

To Reproduce Steps to reproduce the behavior:

  1. Activate the New User Registration Module
  2. Have a new user register
  3. See the received email and click on the link the links redirects to the error page saying

This page isn’t working **** redirected you too many times. Try clearing your cookies. ERR_TOO_MANY_REDIRECTS

When I then switch to the address field in the browser and press Enter the continuation page is opened as expected, however.

Expected behavior A page with a user account registration should be opened Desktop (please complete the following information): Red Hat 7.7 Chrome, Version 80.0.3987.122 (Official Build) (64-bit) 2.0-SNAPSHOT, commit 5aea227 Email received in gmail in the browser.

jacotec commented 4 years ago

Is there any solution at the horizon?

I have "Register" and "Passwort forgotten" links from applications to the appropriate pages of my PWM installation - all of them are showing the "too many redirects" error. When I reload the page in the browser it loads with the same URL. But how to explain that to users?

How can this be solved?

innowintay commented 4 years ago

I am experiencing this issue any time I send my PWM URL to anyone. I have to instruct them to type the URL or copy and paste it into their browser, because they get the "too_many_redirects" error if they try to access the page by clicking the link.

aaovchinnikov commented 4 years ago

As I can see "too many redirects" caused because pwm-cookies are not set but blocked by browsers. We solved this by setting "Sticky Session Verification" parameter from "Enabled" to "Enabled - And pre-load browser cache" in Settings ⇨ Security ⇨ Web Security ⇨ Sticky Session Verification