I just wanted to thank you for your time and effort to create Community Auth. I’m in the final stages of developing a full fledged payment gateway portal, using CA.
I felt I should share what I found, as it could be helpful for others who come across this post via Google.
http://community-auth.com/documentation/login_debugging ::
A more likely problem to see here is that the form_token doesn’t match the flash_token. If this is the case, you need to look for 404 errors in your server access logs (not the CodeIgniter log file). Your server access logs could contain a 404 for an image or some other asset that doesn’t exist. Since a 404 error “uses up” the flash token, you’ll never be able to login until you fix that.
I came across this bug, in an unique situation. I built a controller, called autocomplete, that when passed a zip code, returns the city and state, in json format. This reduces errors and completion time for the users. But whenever the autocomplete would run, it would void the flash token.
I believe I have resolved the issue, by modifying the autoload.php file, with the following mods:
if(strpos( $_SERVER['REQUEST_URI'], 'autocomplete' )){
$autoload['libraries'] = array('fb','database');
}else{
$autoload['libraries'] = array('fb','database','session','Authentication');
}
if(strpos( $_SERVER['REQUEST_URI'], 'autocomplete' )){
$autoload['helper'] = array();
}else{
$autoload['helper'] = array('html','url','form','cookie');
}
if(strpos( $_SERVER['REQUEST_URI'], 'autocomplete' )){
$autoload['config'] = array('db_tables');
}else{
$autoload['config'] = array('db_tables','authentication','google_analytics');
}
if(strpos( $_SERVER['REQUEST_URI'], 'autocomplete' )){
$autoload['model'] = array();
}else{
$autoload['model'] = array('auth_model');
}
This may not be correct, or even 100% functional, but it worked for me, during my initial testing and wanted to share with someone else in case they had a similar issue. It just seems to me to be a design flaw that if a user loads up any other page during registration in a new tab etc, their form submission will fail, also without any visible error message.