[Emergency] Huge Amount of Facebook Authentication Errors

Dagalidis · Mar 29th 2017

Last 2 days I have huge amount of Facebook Authentication errors, and Facebook users can't connect in our Community.

Code

Wed, 29 Mar 2017 09:37:38 +0000
Message: PHP notice in file /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/FacebookAuthAction.class.php (70): Undefined index: access_token
File: /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/WCF.class.php (309)
PHP version: 7.1.3
WCF version: 2.1.13 (Typhoon)
Request URI: /community/index.php/FacebookAuth/?code=AQDqUQ2D9Gqg58amwgRd-Yvv0EB3AWk1Z1n8Ol93oc3tB_lSotCYXWTKw6aR_B5h-sDElbJZ_S_oZ7djoAdjcRicpMgZIMt671xzst8FmCQ2Z8jhrnX7e22X5Cro0pzMrOyl4bnxgIuwI5LK997OAeXumuUxLKgmCeULsG9Ew3k9Sd5L5GiCwlBPZcySNlr_9vdWE4Ri-0TOfTCljCsqrkHbO1oWO6zkQaSOT4LQofIvsFNvSjiGw4ISxah9n1Z6IyiFi-_NixuoTqUG7TLeDzA_-othTNTFtmOWl0u7zRPQkjKPfpVqlXTcG6xZ9C3RY8I&state=647f94476119945d17d6d32fff33d2486e31027c
Referrer: https://xiaomi-miui.gr/community/index.php/LostPassword/
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36
Information: ""
Stacktrace: 
  #0 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/FacebookAuthAction.class.php(70): wcf\system\WCF::handleError(8, 'Undefined index...', '/var/www/vhosts...', 70, Array)
  #1 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/AbstractAction.class.php(49): wcf\action\FacebookAuthAction->execute()
  #2 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/Request.class.php(58): wcf\action\AbstractAction->__run()
  #3 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/RequestHandler.class.php(139): wcf\system\request\Request->execute()
  #4 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/index.php(10): wcf\system\request\RequestHandler->handle('wbb')
  #5 {main}

Display More

Code

Wed, 29 Mar 2017 09:35:35 +0000
Message: PHP notice in file /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/FacebookAuthAction.class.php (70): Undefined index: access_token
File: /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/WCF.class.php (309)
PHP version: 7.1.3
WCF version: 2.1.13 (Typhoon)
Request URI: /community/index.php/FacebookAuth/?code=AQAu_SWZOWu1_1zEp3eU6VdoBcvo4ffiHCr-MJvjQhSy-6Ij5JKoVJWv_DfWaemq9xUMiHchh5k_LrUnsKF5wJEI3alHnKpqJ1Rh-WwDFaXd5cc7IMmAzmEi92pQ839cSFybEUz4q1mBtd9bGVG4OoDSfEfvf1ZI3hnGgdzri0Q4AwL7HIjew6Z8CM0zLbX8PNRGbfKRB-bvzW_oZBAdpU9pPujgxxSpqh3yaflyFQT3IwuaCdhC4YnzOn_txoiW-j9CCNn2Ay6z3WctFdqCEUGWyYKB6Ul-eUDIUsuysiFV3_0Rdz1xNuWhcG26K5d3wtY&state=3c0f6b64d92f0560209b011a6a8d2cee575d5288
Referrer: https://xiaomi-miui.gr/community/
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36
Information: ""
Stacktrace: 
  #0 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/FacebookAuthAction.class.php(70): wcf\system\WCF::handleError(8, 'Undefined index...', '/var/www/vhosts...', 70, Array)
  #1 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/AbstractAction.class.php(49): wcf\action\FacebookAuthAction->execute()
  #2 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/Request.class.php(58): wcf\action\AbstractAction->__run()
  #3 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/RequestHandler.class.php(139): wcf\system\request\Request->execute()
  #4 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/index.php(10): wcf\system\request\RequestHandler->handle('wbb')
  #5 {main}

Display More

The problem is Huge, because our members can't connect ...

Any Ides from where to start ?

Here is my Server Config.

Code

Software
Burning Board® Version
4.1.13
Community Blog™ Version
2.1.6
Bugtracker-version
2.1.1 pl 1
Infinite Filebase Version
3.1.1 pl 1
voolia News-System Version
1.0.5
Community Marketplace-Version
1.1.4 (Bifrost)
Community Gallery™-Version
2.0.5
Community Calendar™ Version
2.1.5
VieCode Lexicon Version
5.2.3 pl 1
EasyRating Version
1.0.4 pl 5
Community Framework™ Version
2.1.13 (Typhoon)
Server
Operating System
Linux
Webserver
nginx/1.11.10
PHP Version
7.1.3
MySQL Version
5.5.5-10.1.22-MariaDB
Current UNIX Load
2.28, 2.3, 2.37

Display More

**Alexander Ebert** · Mar 29th 2017

Tim Düsterhus

Dagalidis · Mar 29th 2017

I think is related to this Alert from Facebook

As you see the problem started 2 days ago....

Xiaomi Miui Hellas currently has access to Graph API v2.2 which will reach the end of its 2-year lifetime on 27 March, 2017. To ensure a smooth transition, please migrate all calls to Graph API v2.3 or higher.

My API is Version 2.3 i think

Now, what I must do to solve this Issue ?

Thanks in Advance for your Help....

SoftCreatR · Mar 29th 2017

Quote from Dagalidis

Now, what I must do to solve this Issue ?

Create a new app, paste the new keypair in your ACP and you are good to go. Or just set the new version:

Dagalidis · Mar 29th 2017

Created New API v.2.8

Declared new API ID and Secret Key in ACP of WBB, but still Same Problems .....

No traffic - No Logins - Same Errors...

mustard · Mar 29th 2017

Same problem. Users can't log in!

Display Spoiler

SoftCreatR · Mar 29th 2017

I'm already looking at this.

gn5VmUKCtv6ekrMf · Mar 29th 2017

Quote from SoftCreatR

Create a new app, paste the new keypair in your ACP

Doesn't that revoke all existing logins with facebook-accounts?

Quote from SoftCreatR

Or just set the new version:

I never understood that "tool". You can chose something but you can't safe anything or click a next-button or something else. It's just a stupid select-input which won't upgrade the version and stop facebook from sending stupid notifications that I should use this tool to upgrade the version.

SoftCreatR · Mar 29th 2017

Quote from MysteryCode

Doesn't that revoke all existing logins with facebook-accounts?

Users have to re-authenticate, yes. That's why i posted the alternative (and better) way.

Dagalidis · Mar 29th 2017

Upgrade don't have any affect to the Problem...

Nothing is working now, and we Have e-mails from members which can't login to our community...

Is An Emergency situation and affecting more than 12k accounts from facebook logins.

I don't know what to do.

I will send a mail to all of our members to inform them for this issue and ask for sorry and wait to fix it.

Maybe needs an Emergency Update to your code dear Developers, because Facebook changed something critical in their routine and now we have 100% fail in Authentication,

SoftCreatR · Mar 29th 2017

To fix this, edit the file wcf/lib/action/FacebookAuthAction.class.php and find:

PHP

parse_str($content, $data);

Replace it with

PHP

parse_str($content, $data);

if (empty($data['access_token'])) {
    try {
        $data = JSON::decode($content);
    }
    catch (SystemException $e) {
        $e->getExceptionID();
        throw new IllegalLinkException();
    }
}

Display More

In my test, the data returned from the API was JSON, while it has been different before (that's why parse_str was used). I've left the previous code, because there might be cases, where the API still returns the data in the "old" format, so both formats are possible.

**Tim Düsterhus** · Mar 29th 2017

Hi

independently from SoftCreatR I fixed the issue in a similar fashion in git: https://github.com/WoltLab/WCF…fbed7bc7a9ea031c683566573

SoftCreatR · Mar 29th 2017

I was going to change my code and make it similar to avoid the unneccessary call of parse_str

Dagalidis · Mar 29th 2017

YES !!!!!!

This work just FINE !!!!

Now is ok and tested on both API Versions (Old and New).

I am glad that helped to fix this issue...

AWESOME support as always my Friend.

Thank you very much.

Muschelschaf · Apr 2nd 2017

Fixed the problem for me on wBB4, too.

Maybe this should be released with a PL

[Emergency] Huge Amount of Facebook Authentication Errors

Participate now!

Share