Well, I guess that the testing environment doesn't use the same domain of the production one. Right? So the cookie is different between the two.
But if someone was logged on the same domain with a cookie generated on PY2 and you upgraded to PY3 he would be unable to be recognised when he comes back and he would have to clear cookies to login again. Il gio 13 feb 2020, 17:56 Matthew Cahn <[email protected]> ha scritto: > Thanks, Alessandro. That makes sense, although I'm not sure it exactly > matches the behavior. Since a private window works, it does seem > cookie-related. On the other hand one user was able to log in during > testing, but then later was not. He said it was the same browser on the > same computer. Since I can't duplicate the problem, it's very hard to > diagnose. I wound up pointing Apache at our Central Authentication Service > (CAS), and skipping the Turbogears authentication entirely. That at least > has the advantage of two-factor authentication. > > Best, > Matthew > > On Thu, Feb 13, 2020 at 4:02 AM Alessandro Molina < > [email protected]> wrote: > >> Upgrading from Python2 to Python3 changes the way the cookie signatures >> are generated if I remember correctly. >> So authentication tokens created on PY2 don't work on PY3 and the user >> will have to reach to /logout_handler to delete the old cookie and enable >> the new one (or clear cookies). >> >> That might be the problem you are facing. >> >> >> >> On Wed, Feb 5, 2020 at 3:03 AM MHCPU <[email protected]> wrote: >> >>> "Private" or "incognito" browser window or tab, that is. >>> >>> Matthew >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "TurboGears" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/turbogears/d90385a7-3293-40ee-9d2b-93b671e1c3ec%40googlegroups.com >>> <https://groups.google.com/d/msgid/turbogears/d90385a7-3293-40ee-9d2b-93b671e1c3ec%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "TurboGears" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/turbogears/CAJfq2JEZutqTFT5ejJETkPFomMNkYpmMC77Vyz7T6tTgojaSZw%40mail.gmail.com >> <https://groups.google.com/d/msgid/turbogears/CAJfq2JEZutqTFT5ejJETkPFomMNkYpmMC77Vyz7T6tTgojaSZw%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- > You received this message because you are subscribed to the Google Groups > "TurboGears" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/turbogears/CACcPiD21Wh1tUytfba38EEpQ2LiK663n%3DrDiqJJ7w2RNrvmKkg%40mail.gmail.com > <https://groups.google.com/d/msgid/turbogears/CACcPiD21Wh1tUytfba38EEpQ2LiK663n%3DrDiqJJ7w2RNrvmKkg%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "TurboGears" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/turbogears/CAJfq2JFgfLtWjgC27fT4fm6xmjnHuBAXRJOrd553E5S14bv4bA%40mail.gmail.com.
