Authorization keeps dropping

keaks · November 23, 2022, 12:10pm

after the update, if you are in the control panel, the session is reset. And every minute you have to re-login. In the settings it is worth resetting only the session after 1 hour

eris · November 23, 2022, 12:15pm

We log your client ip if it changes all the time it might be the cause of the issue.

keaks · November 23, 2022, 12:24pm

static ip, And yes, nothing changes for me every minute, if I’m ready at the address

this was not the case before the update. all problems persist after update

eris · November 23, 2022, 12:39pm

github.com

hestiacp/hestiacp/blob/963c9f219d07d0993f49a586915f11008206ff56/web/inc/main.php#L68-L76


      
          // Checking user to use session from the same IP he has been logged in
          if ($_SESSION['user_combined_ip'] != $user_combined_ip) {
              $v_user = quoteshellarg($_SESSION['user']);
              $v_session_id = quoteshellarg($_SESSION['token']);
              exec(HESTIA_CMD . 'v-log-user-logout ' . $v_user . ' ' . $v_session_id, $output, $return_var);
              destroy_sessions();
              header('Location: /login/');
              exit;
          }

or

github.com

hestiacp/hestiacp/blob/963c9f219d07d0993f49a586915f11008206ff56/web/inc/main.php#L39-L62


      
          $user_combined_ip = '';
          if (isset($_SERVER['REMOTE_ADDR'])) {
              $user_combined_ip = $_SERVER['REMOTE_ADDR'];
          }
          if (isset($_SERVER['HTTP_CLIENT_IP'])) {
              $user_combined_ip .= '|' . $_SERVER['HTTP_CLIENT_IP'];
          }
          if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
              $user_combined_ip .= '|' . $_SERVER['HTTP_X_FORWARDED_FOR'];
          }
          if (isset($_SERVER['HTTP_FORWARDED_FOR'])) {
              $user_combined_ip .= '|' . $_SERVER['HTTP_FORWARDED_FOR'];
          }
          if (isset($_SERVER['HTTP_X_FORWARDED'])) {
              $user_combined_ip .= '|' . $_SERVER['HTTP_X_FORWARDED'];
          }
          if (isset($_SERVER['HTTP_FORWARDED'])) {
              $user_combined_ip .= '|' . $_SERVER['HTTP_FORWARDED'];
          }
          if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) {

This file has been truncated. show original

If you are using Cloudflare for Hestia panel it self it might be the issue.

Unless you provide more information not a lot can be done…

keaks · November 23, 2022, 12:50pm

I don’t use Cloudflare, I don’t change my IP address at all. And now I’m generally asked to enter the panel again with a periodicity of 30 seconds. I have cleared the browser cache, nothing helps.

Nasser · November 23, 2022, 9:42pm

I am experiencing the same issue. I managed to stay logged in using the browser in incognito mode.

fayiq · February 8, 2023, 3:34pm

Did you find any solution?? I did fresh install on: 08-02-2023
same issue panel gets logged out after few seconds.