New user here, yes I’m looking for alternatives to Reddit …
I created an account on lemmy.world, subscribed to a couple communities, and even replied to a post. So far, so good.
However, it keeps showing me as not logged in. The weird thing is I still have my subscribed communities, but am not logged in. Every once in a while when I try something more than reading, I have to login again (then again, sometimes I don’t). For example, by the time I read a bunch of posts in a community to decide whether I want to subscribe, I sometimes need to login again to subscribe
I’m browsing lemmy.world from Safari on iPad, and should have mostly default settings. Can anyone help with explaining or fixing this behavior? It’s really annoying.
refreshing the page in Safari shows that there is a caching issue with the subscriptions: after refreshing I can no longer see those, so it’s consistent with being logged out. If I am logged out, I should not see my subscribed communities (privacy issue)
I didn’t need to refresh in Firefox. When I appeared logged out, I also did not see my subscribed communities.
one trigger is browsing elsewhere: I clicked a link to a communities browser at browse.lemmy.de, and when I clicked back to lemmy.world (either browser), I was logged out.
I was also logged out in Safari for unknown reason. Could it only allow login from one browser at a time (either by lemmy or on iPad)? Could it sign out if Safari was paged out of memory?
I am working on a Lemmy client and have noticed that the Login system is secure, but it isn’t very robust. Usually, there is something called a “refresh token” provided that automatically verifies users and lets a user stay logged in indefinitely. Lemmy doesn’t have that implemented at this time, so eventually you will be logged out by your browser as a security measure when your cookie expires and you will have to log in again. For Safari, the maximum time is 7 days before you are logged out.
So, until Lemmy implements refresh tokens or similar, this will probably be how it is on most browsers and Lemmy clients.