Being logged out at random durations [Firefox behaviour]

[arimareiji]

If so, no worries: Is it normal to be asked to log back in every day or two, sometimes a week or two, at random intervals despite not having logged out or cleared cookies or whatnot? (Most recently within the last 15-ish minutes, it's not just at night or any suchlike.)

 

[RogueKitsune]

If so, no worries: Is it normal to be asked to log back in every day or two, sometimes a week or two, at random intervals despite not having logged out or cleared cookies or whatnot? (Most recently within the last 15-ish minutes, it's not just at night or any suchlike.)

Must of the time that behavior is related to your browser or some extension/add-on.

 

[BestBoy]

Happens to me too sometimes. I don't have any special rules set for deleting cookies or cache. Doesn't really bother me that much, but I am curious if there's an explanation server side.

 

[RogueKitsune]

The only "server side" explanations would be would be you did not check "Remember Me" when logging in, or the Authentication service was restarted/died. The later would impact most/all users though.

 

[BestBoy]

The only "server side" explanations would be would be you did not check "Remember Me" when logging in, or the Authentication service was restarted/died. The later would impact most/all users though.

I do check it. Could be something to do with putting my laptop to sleep or firefox updates. But that's why I'm hopeful that OP will get a response from one of the web devs.

 

[BraveDude8]

Login sessions last three months, if you're getting logged out sooner than that then something on your side is deleting the session token.

Safari on iOS clears LocalStorage after 7 days of inactivity, which is the most common cause. Outside of that, privacy-focused browsers/extensions that automatically clear browsing history/cookies often delete session tokens as a side effect.

 

[arimareiji]

Login sessions last three months, if you're getting logged out sooner than that then something on your side is deleting the session token.

Safari on iOS clears LocalStorage after 7 days of inactivity, which is the most common cause. Outside of that, privacy-focused browsers/extensions that automatically clear browsing history/cookies often delete session tokens as a side effect.

I don't know if this is the key to it, but thank you for providing specific leads to follow. It doesn't do it to any other site that I've observed, but maybe there's something about one of the cookies Mangadex uses that Privacy Badger thinks is suspicious.

 

[BraveDude8]

I don't know if this is the key to it, but thank you for providing specific leads to follow. It doesn't do it to any other site that I've observed, but maybe there's something about one of the cookies Mangadex uses that Privacy Badger thinks is suspicious.

Privacy Badger might flag tokens that follow you across subdomains (main site/forums/auth) and clearing those would log you out, yes.

 

[arimareiji]

Privacy Badger might flag tokens that follow you across subdomains (main site/forums/auth) and clearing those would log you out, yes.

Possibly noteworthy: Your post got me thinking, so I checked. And indeed, I had to disable it on both forums.mangadex.org and mangadex.org. Thank you again.

 

[arimareiji]

Privacy Badger might flag tokens that follow you across subdomains (main site/forums/auth) and clearing those would log you out, yes.

Possibly noteworthy: Your post got me thinking, so I checked. And indeed, I had to disable it on both forums.mangadex.org and mangadex.org. Thank you again.

TLDR for anyone else running into this: Type auth.mangadex.org into your URL box and hit enter, then disable it for this subdomain as well.

Apparently it also has to be disabled on auth.mangadex.org, or at least that's what I'm hoping since I just had it happen again. Hopefully this will be the end of it, and there aren't more subdomains to disable it on.

It wasn't obvious this function was accessing auth.mangadex.org (which might be why Privacy Badger treats it as suspicious)... as far as I can recall just now, the "You need to sign in to access this page" (with a button that lets you do so) page doesn't display it in the URL. But when I officially signed out and officially signed in, the URL box did include "auth." so it was easy to disable it.

 

[BestBoy]

I think I've narrowed my issue down to some complication that arises when I've got a chapter open and I close my laptop for the evening. When I finish the chapter I have to log back in. Not sure what causes that, but it's probably specific to my setup.

 

[jorgelotr]

I have found several threads complaining about a similar effects, yet different, so the fix is not the same.

Here is the issue: when I binge read a series, I've found many times when the reading status stops updating at some point. After troubleshooting a bit, I've found that at random when advancing to the next chapter, I get "logged off" for that tab (and I really mean "that tab", since if I have another tab open and refresh it, open a new tab and go to MD or insert a new MD URL/use the provided link to go to the series page, I still show as logged in). I can fix it, when detected, by login in again in the same tab (but only for the current chapter, the rest missed have to be updated manually) and, different from the fix of the similar issue, the missed chapters don't get automatically flagged as "read" later on.

I find it weird that I can be both logged in and off at the same time, with no reason for the log off.

 

[BraveDude8]

What browser/version are you using, what operating system are you on, what browser extensions do you have installed, and do you have anything configured that'd sandbox individual tabs away from eachother/block cross-site cookies/localstorage/has any particular focus on privacy?

 

[jorgelotr]

This has happened to me in both Brave Browser and Microsoft Edge. As far as I know, there's no sandboxing activated and it doesn't seem to happen with other sites.

The closest thing I seem to have is Tampermonkey, which has mangadex on its blacklist (but it seems like "blacklist" just means that the extension is disabled for the site, so it shouldn't be the reason, and only one of my browsers has it), and as far as I'm aware (and I've checked again just now) the only adblock-adjacent thing I have active (and only in Brave, not Edge) is set to only block especifically just google trackers, nothing that interferes with the site itself (and, once again, only one of the browsers even has that extension).

It still wouldn't explain why this behaviour happens solely when jumping from one chapter to another (and not always), and not when doing anything else (like jumping from series to series).

 

[arimareiji]

TLDR for anyone else running into this: Type auth.mangadex.org into your URL box and hit enter, then disable it for this subdomain as well.

Apparently it also has to be disabled on auth.mangadex.org, or at least that's what I'm hoping since I just had it happen again. Hopefully this will be the end of it, and there aren't more subdomains to disable it on.

It wasn't obvious this function was accessing auth.mangadex.org (which might be why Privacy Badger treats it as suspicious)... as far as I can recall just now, the "You need to sign in to access this page" (with a button that lets you do so) page doesn't display it in the URL. But when I officially signed out and officially signed in, the URL box did include "auth." so it was easy to disable it.

It's been long enough that this seems to be a solution* wrt Privacy Badger. The unwanted logout happened again even after disabling PB for mangadex.org and forums.mangadex.org, but it hasn't happened since also disabling PB for auth.mangadex.org.

* - Probably in tandem with the post above it. You could try just disabling PB on auth.mangadex.org if you want, but if you keep getting logged out then do it for the other two as well.

Or then again, looks like I was wrong. I've been logged out three times since I made this post, so my next gambit is disabling PB on *.mangadex.org and hoping the wildcard character works (since I have no idea how many more subdomains exist).

 

[arimareiji]

Final update: None of the solutions work for Privacy Badger, assuming it's the real culprit. Still getting logged out, even after putting this in.

 

[RogueKitsune]

my next gambit is disabling PB on *.mangadex.org and hoping the wildcard character works (since I have no idea how many more subdomains exist).

The only domains that care about authentication are the following

• Mangadex.org
• Api.mangadex.org
• Auth.mangadex.org
• Forums.mangadex.org

There are some other MD domains but they are not sent authentication info

• Uploads.mangadex.org
• Mangadex.network
• Status.mangadex.org

As for your issue in general I haven't had any issues using nightly Firefox with ubo

 

[Akule]

Final update: None of the solutions work for Privacy Badger, assuming it's the real culprit. Still getting logged out, even after putting this in.

I don't have Privacy Badger, but I have been having this problem from time to time with Firefox (regular). I don't seem to have the problem in Chrome.

 

[arimareiji]

I don't have Privacy Badger, but I have been having this problem from time to time with Firefox (regular). I don't seem to have the problem in Chrome.

Thank you, I was taking someone's surmise for it that privacy-focused browsers / extensions were the most likely culprit. (And I also use Firefox... though I dunno if you could call it "privacy-focused".)

 

[Akule]

Thank you, I was taking someone's surmise for it that privacy-focused browsers / extensions were the most likely culprit. (And I also use Firefox... though I dunno if you could call it "privacy-focused".)

I have the same extensions for both browsers, so the only real difference is Chrome vs Firefox. I have everything set to keep me logged in, but for example, when I was working in another tab and then just came back to Mangadex just now, it treated me as not being logged in, but a simple refresh of the page made it realize that I was actually logged in.

I was getting a weird recaptcha error occasionally for about a week, so I assume it is something with that and generic Firefox. I simply don't have the problem in Chrome.