Unable to access protected URLs when logged in about magento2-force-login

[adamj88]

@websharp have you had any experience of this issue or any ideas what may be causing this?

[der-workfloh]

Hi @adamj88 ,

so do you have a custom target url set in the administration? The handling of this is happening in the after login plugin, I need to look it up more to conclude the potential of misconception, but for the moment I am not clear of the cause of the side effect you describe.

[adamj88]

Our target URL is set to customer/account/login.

We debugged it a bit further and round the event customer_session_init (https://github.com/bitExpert/magento2-force-login/blob/master/etc/events.xml#L15), was getting fired twice for some reason, in the first instance as a guest, and in the second as a logged in user.

To work around this we fired the LoginRequiredOnCustomerSessionInitObserver observer on a much earlier event: controller_action_predispatch.

We also injected \Magento\Customer\Model\Session into the observer as well and for the isLoggedIn() method.

I can put together a PR for this if required, but I'm not sure if this was an isolated incident - are you experiencing this too?

[der-workfloh]

Hi @adamj88 ,

I was not able to reproduce this issue. I checked on CE-2.1.7 (clean setup). Do you have any advanced caching systm running like Redis, Memcached or Varnish?

[adamj88]

Hi @websharp

Yes this was both with Varnish & Redis running, I'll push a copy of the work around to a fork when I get chance, see if it makes any sense.

[der-workfloh]

Hi @adamj88 ,

I will close this issue for now, but if you encounter the problem again, feel free to reopen. Maybe you want to try out the new release candidate for v2.3.0 first (https://github.com/bitExpert/magento2-force-login/releases/tag/v2.3.0-RC1).

Best Regards