I am currently getting signed out every minute from lemmy.world. This is not a client side cache issue. I tested making API calls from the command line (with curl) with no cache and the issue still occurs. One call I get the correct response, the next I get a 400 telling me im not signed in.

I’m primarily testing with the https://lemmy.world/api/v3/user/unread_count api endpoint. I’m not sure if this issue occurs with all endpoints.

Reproduction steps:

  1. Get a lemmy.world JWT token for your account using your desired method (eg. postman).
  2. curl https://lemmy.world/api/v3/user/unread_count?auth={JWT_TOKEN_HERE}
  3. Note the 400 error. If you do not get an error repeat step 2.

Edit

This issue only seems to affect lemmy.world so a temporary workaround is to use a different instance for the time being.

  • @ElectroVagrant
    2•1 year ago

    I noticed it a little yesterday, but strangely it seems worse today. I’d cleared cache & cookies after the compromise issue, so I was pretty sure it wasn’t to do with not doing that, however I think OP’s on the right track with their assessment.

    Not really sure why it would suddenly seem worse though, other than maybe something to do with server traffic/activity.