User authentication not working in mobile view

[danchann]

This is tested in the default flask-base instance.

Untitled.mov

[abhisuri97]

I'm having a bit of difficulty reproducing this. Does authentication work normally if you're not in the mobile view?

[danchann]

I'm having a bit of difficulty reproducing this. Does authentication work normally if you're not in the mobile view?

Yes, authentication is working normally in desktop view but once switched to mobile view, the user becomes not authenticated.

Screen.Recording.2021-11-17.at.3.44.52.PM.mov

[danchann]

I verified that the user is lost as soon as it is switched to mobile view
Desktop

Mobile

[danchann]

Looks like it's due to the session protection feature of flask-login.
The default protection in this repo is set to 'strong` mode, when the view is changed it seemed that the entire session is deleted.
See https://flask-login.readthedocs.io/en/latest/#session-protection

Solution:
Change the login_manager.session_protection to from "strong" to "basic".

flask-base/app/__init__.py

Line 24 in f58ca73

login_manager.session_protection = 'strong'

[abhisuri97]

Fixed. Could you pull again and see if that changes anything?

[danchann]

Yep, it's working fine now. Closing this.