I am currently getting signed out every minute from lemmy.world. This is not a client side cache issue. I tested making API calls from the command line (with curl
) with no cache and the issue still occurs. One call I get the correct response, the next I get a 400 telling me im not signed in.
I’m primarily testing with the https://lemmy.world/api/v3/user/unread_count api endpoint. I’m not sure if this issue occurs with all endpoints.
Reproduction steps:
- Get a lemmy.world JWT token for your account using your desired method (eg. postman).
curl https://lemmy.world/api/v3/user/unread_count?auth={JWT_TOKEN_HERE}
- Note the 400 error. If you do not get an error repeat step 2.
Edit
This issue only seems to affect lemmy.world so a temporary workaround is to use a different instance for the time being.
Just a quick statement from the admins team to say that we are aware of the issue and yes we are looking into this.
Thank you @[email protected] for the elaborate report and everyone else for their patience while we try to sort this one out!
Edit: Lemmy was upgraded to 0.18.2
Thank you for all that you do for this place. I am consistently amazed at how quickly y’all are able to resolve issues.
o7
Thank you for making a statement about it!
Sounds like lemmy.world runs on 2 instances and the requests are being loadbalanced between those two. That and that the jwt secret is different between those two instances causing one to accept and the other to reject
This is also my theory. I think you’re right on the money here. They probably rotated secrets from yesterday’s hack and forgot to restart both servers.
Does anyone know who can contact the server admins?
Yell real loud in all caps
REAL LOUD
I was running into this across both my accounts on lemmy.world. Changing my password seems to have resolved it both on the web and in Mlem.
Yeah. Lemmy.world is currently unusable on the desktop. I don’t have that problem in Memmy. Growing pains but I hope the problem will be fixed soon. Do anyone know if one of the mods in North America are aware of the problem?
I was having trouble in liftoff and the browser. Cleared data and cache from liftoff thinking maybe something got messed up there and now I can’t even log back into my .world account 🤷♂️ I’ll hang here for a bit I guess.
Same here, can’t log in again via Liftoff.
Does resetting your password stop it?
No. This issue goes a lot deeper than your login information.
You have actually tried though? Sounds like being kicked off because of a login from another device.
It’s based on my understanding of how servers work and my tests. There is obviously always room for error, but I’m like 99% confident I’m right.
Also AFAIK lemmy doesn’t kick you out because you signed in elsewhere.
I’m just troubleshooting by eliminating a massive category of possible causes.
I’m asking you to physically try, not your opinion. Please, we have all been there “I don’t need to reset my router, I know what I’m doing”
Removed by mod
Same here, it’s driving me mad. Also did the above and glad to see I’m not alone!
The good news is it only appears to affect lemmy.world. If you have an account on another instance, you should switch to that account for now.
I have the same issue, not sure what’s the root of the problem
deleted by creator
Lucky I have a .ml account
is there a way to see lemmy instances sorted by subscriber amount ? I might wanna join the smaller ones lol
This should work https://the-federation.info/platform/73
deleted by creator