Question

Hi, here is a long-winded description of authentication issues I (along with most of my colleagues) am experiencing with Kiln for Your Server, Version 2.4.105.0 (DB 109). I know we're not on the latest version, but I haven't seen anything specific to this issue in the release notes, so I'm not sure if it's been fixed already.

I open IE 9 and go to /fogbugz/kiln, and I get redirected to /fogbugz/kiln/Auth/LogOn?ReturnUrl=%2Ffogbugz%2Fkiln%2F. I log in and choose "Remember me." The push activity displays, and if I click the Review button for one of my changesets, the New Review screen appears. I open /fogbugz/kiln in a new tab, the push activity displays, and again if I click the Review button the New Review screen appears. Then I open a new instance of IE, go to /fogbugz/kiln, and again it appears that I am logged in -- the push activity displays and it shows my name and the Log Off link at top right -- but if I click the Review button I get:

Your session has expired
You are no longer logged in. Please log in and try your request again.

If I click the "log in" link on that message, it opens a new tab at /FogBugz/kiln, and still appears that I am logged in, but it is still in this "partially logged in" state. Meanwhile, in the original instance of IE that I opened, I am still fully logged in, and can open Kiln in new tabs and still create reviews.

I get the exact same behavior with Firefox 5.

Chrome 12.0.742.122 has stranger behavior. I go to /FogBugz/kiln, and it appears that I'm logged in, but I get the session expired message if I click the Review button. If I click the Log Off link at top right, it goes to the LogOn page, but if I go to /FogBugz/kiln again it displays the push activity again -- it's not ever "fully" logging out. If I click Log Off, then I do log in again, then in only that tab that I just logged in will I get correct functionality. In all other tabs I get the "partially loggged in" behavior. (I assume that's because with Chrome each tab is a separate process.)

By the way, I used clicking the Review button in my examples above, but I also get the session expired message if I try to filter the push activity or do other similar things. Also, if I click on a link in an email for a review, I have no problems while navigating the review, clicking files, changesets, etc., but when I click the Approve/Reject tab and click Approved, I get the "Your session has expired..." message again.

Answer 1

Hi Kevin! This is a longstanding mysterious bug related to how FogBugz and Kiln communicate plus how they interact with our authentication cookies. As far as I know, we haven't (purposefully) fixed this bug or diagnosed its root problem. I'm glad the issue was corrected for you; the usual workaround we recommend is to clear out your cookies. We have open cases to debug and fix the problem and we made some recent progress. Sorry that I don't have more information, hopefully this will be fixed in future releases.

Answer 2

I also encounter this error, normally when following these steps:

• receive an e-mail requesting a code review
• click link in the e-mail to start the review
• review code and add an approval comment
• click the Approved button

At this point several times, Kiln has popped up a message saying that my session has expired. when I click the link to log in again, it doesn't require me to log in, but I have to re-enter the response to the code review.

Answer 3

We've been having this issues tons, and submitted some Fiddler traces to FC. The latest release has in the patch notes that it fixes "Spurious session expired notices", so we're hopefully it'll solve the problem. We've only been on the new version a few days, but so far, it's looking promising :-)