bcgov / bcgov/foi-flow

User Unable to Login - Login Looping

Open
#2,276 2 comments 0 reactions 0 assignees View on GitHub
bug low priority
Dominant language
Python
Stars
8
Forks
2
Avg merge
14h 34m
Merged PRs (30d)
46

Description

**Describe the bug in current situation**
A user from economy sector team reported being unable to login after repeated attempts. When user was brought to IDIR login page, they would enter credentials, and would be sent back to the IDIR login page.

User attempted to clear cache, try new browser windows and other common fixes. Issue was eventually resolved on its own, as a developer cleared the user's sessions from keycloak.

It is unclear how to trigger this bug, as only one user has reported this and have been unable to replicate. User had this issue in both chrome and edge.

**Link bug to the User Story**

**Impact of this bug**
So far impacting 1 user - impact to user is high, as they are unable to login and complete tasks when the issue is present.

**Chance of Occurring (Unclear)**

Unable to replicate - but have visually seen the bug through screensharing. User is not doing anything outside the ordinary, they are using the correct URL and logging in through IDIR as expected

**Pre Conditions: which Env, any pre-requesites or assumptions to execute steps?**

**Steps to Reproduce**
Steps to reproduce the behavior:
1. Go to production link
2. Login through IDIR
3. Get taken back to Login through IDIR

**Actual/ observed behaviour/ results**

**Expected behaviour**
GIVEN a user has entered valid credentials for the application
WHEN they login to the system
THEN they will be taken to their Queue homepage
AND the queue will be defaulted to 'My Requests'

**Screenshots/ Visual Reference/ Source**
If applicable, add screenshots to help explain your problem. You an use screengrab.

Contributor guide

Open the contributing guide

Research direction

Start with the production IDIR login flow and the point where a user is returned to the IDIR login page. Compare the reported reproduction steps with the expected Queue homepage behavior, and investigate how clearing the affected user's Keycloak sessions resolved the issue. Done means the login loop can be reproduced or its cause is identified and the user reaches the Queue homepage after valid credentials.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.