Chrome keeps on asking me to authorize draw.io, about every 30 minutes

[Alon Dean]

I keep on getting this popup:

Authorization required: Authorize this app in Google Drive:

Obviously I authorized it... but it never goes away! keeps on coming back every 30 minutes or so!

[marija...@gmail.com]

Hi,

Have you changed the default privacy settings? Do you have any browser plugins? 

Do you see the same behavior if tested in Chrome Incognito?

If you have multiple accounts, try to use only one (log out from other accounts)

Does something help?

Regards,

[Alon Dean]

default privacy settings were not change afaik

I have multiple chrome extensions but none seem to be related to my issue

I have multiple accounts cause I need to be logged in as my work google account as well as my personal google account

So I still have no solution to this very annoying issue - every 30 minutes or less I get this notification.

[John Miezitis]

This is happening to me as well with Firefox.  Started early this year.

If anybody has any suggestions they are more than welcome.  The issue is driving me nuts.

[David Benson [diagrams.net]]

We need exact environment details, we've never been able to recreate this.

[Alon Dean]

Hi David, Please let me know what exactly you need and I'll be happy to provide

[diagrams.net Q&A]

Thanks. We need browser, browser version, operating system, any browser extension, any non-default browser settings, URL you're accessing diagram.net from. If you're storing in Google Drive how many accounts are you logged into. If more than one is the account you're using the default account?

[Alon Dean]

Browser: Chrome
Version:  91.0.4472.101 (Official Build) (64-bit) (thought it happens for at least half a year and I'm usually updating Chrome when there's a pending update)
OS: Win 10 Pro 1909
Chrome enabled extensions: Google Dictionary, Google Docs Offline, uBlock Origin, Walkme Extension, Zoom scheduler
Chrome non-default settings: I changed nothing, maybe my organization did... but if it did I guess its the new tab page and bookmarks bar
URL: https://app.diagrams.net/
I am storing in Google Drive, I have 2 Chrome profiles logged in (google accounts) - one is my personal one, the other is the workplace's one (google-based).
Whenever I work with drawio, I do so with the Chrome profile which is the workplace's one. 
Whenever I get a prompt from drawio to authorize drawio, I can choose either profile of the 2 I mentioned and I always choose the workplace's one.

I don't know how to set a default account, didn't know that's an option

Hope I answered all of your questions.

It really is frustrating to work on a document this way - re-authorize every 30 minutes or so.

Waiting for your reply and thank you very much
Alon

[Ashraf Teleb]

Does the issue persist if you used incognito mode and one account?

--
You received this message because you are subscribed to the Google Groups "diagrams.net Q&A" group.
To unsubscribe from this group and stop receiving emails from it, send an email to drawio+un...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/56d69d1e-66a7-4a82-b25f-b95fa09c1114n%40googlegroups.com.

[Alon Dean]

Yes, even in incognito, when I signed in using only 1 account, I still need to re-authorize every once in a while

[Alon Dean]

ping? it's really not ideal working this way...

[John Miezitis]

I am a Firefox user primarily and haven't seen this issue for awhile and thought to test firefox and chrome side by side.

Google Chrome 91.0.4472.114 (Official Build) (64-bit)

Revision 4bb19460e8d88c3446b360b0df8fd991fee49c0b-refs/branch-heads/4472@{#1496}

OS Linux

JavaScript V8 9.1.269.36

User agent Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36

Command Line /usr/bin/google-chrome-stable --flag-switches-begin --flag-switches-end --origin-trial-disabled-features=SecurePaymentConfirmation

Name Firefox

Version 89.0.1

Build ID 20210614221319

Distribution ID canonical

User Agent Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0

OS Linux 5.11.0-22-generic #23-Ubuntu SMP Thu Jun 17 00:34:23 UTC 2021

Application Binary /usr/lib/firefox/firefox

Both running on the same workstation:

DISTRIB_ID=Ubuntu

DISTRIB_RELEASE=21.04

DISTRIB_CODENAME=hirsute

DISTRIB_DESCRIPTION="Ubuntu 21.04"

NAME="Ubuntu"

VERSION="21.04 (Hirsute Hippo)"

ID=ubuntu

ID_LIKE=debian

PRETTY_NAME="Ubuntu 21.04"

VERSION_ID="21.04"

Loaded a drawing in Firefox from our Google Share Drive tested ok by creating new tab and deleted it.  Keeping the drawing open in Firefox I loaded the same drawing in Chrome had to do the "Authorize" step created a tab added some text observed the same tab appear in Firefox.  Went and read some emails and came back to the drawing in Chrome where it asked me to "Authorize" again.  Without completing the "Authorize" step I checked the drawing in Firefox.  I was able to switch tabs etc without being prompted to "Authorize".

Hope this helps.

[Ashraf Teleb]

Hi John,

We store the refresh token (which allows for more than 1 hour authentication) as a secure HTTP only cookie. To confirm it exists, please open the browser console (F12), go to https://app.diagrams.net/google [ignore the error], in the browser console -> Network tab -> click on the google request -> Cookies tab (there should be a cookie similar to the following screenshot)

Do you see this cookie?

To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/039220e4-934e-4477-8888-6e2e43f583f7n%40googlegroups.com.

[Alon Dean]

I'll answer your question - did what you said, clicked on the app.diagram.net request - no cookie tab (and I'm logged in)

[John Miezitis]

Thanks Alon,

I haven't seen a repeat of the issue since my last message.

The cookie is currently present so I don't know what has changed.

[Ashraf Teleb]

Hi Alon,

No cookies means you didn't check remember on the authorize dialog OR browser settings restrict such cookies

To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/f8a17926-7a12-4857-9f3c-e39ae1ae18ddn%40googlegroups.com.

[Alon Dean]

I see the cookies when clicking on the lock icon in the address bar, left to the address itself, attached a screenshot of the cookie screen when the re-authorize request appears in the background

[Alon Dean]

And here's the expiry date of the cookie

[Ashraf Teleb]

Hi Alon,

Given the cookie expiration date, it is the logout cookie. An error occurred when we tried the refresh token and forced a logout action.

Can you please open the browser console (press F12) and work normally with the app. When you face the issue again, send us any errors in the console (especially failed network requests)

Thanks

To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/d8f389e9-7af8-4336-afb5-eca396bd6aadn%40googlegroups.com.

[Alon Dean]

Thanks,
Regarding the cookie - the more relevant one is "auth-state" which is set to expire after 10 minutes.
Regarding the console - here are the logs (only 2) I got:

app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:371 GET https://app.diagrams.net/google?state=cId%3D[not sure I should post these numbers].apps.googleusercontent.com%26domain%3Dapp.diagrams.net%26token%3De8u9glds8hrdqgsvdgd0pecbgn7628j5rrjocc3026mc4vje4ps&userId=102799055529960843054 500

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:371

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:10967

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:10965

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:268

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:370

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:268

XMLHttpRequest.send (async)

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:371

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:10965

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:10970

(anonymous) @ app.min.js?__WB_REVISION__=2664191ccf379949e527375913e4dd78:268

pusher.min.js:8 GET https://stats.pusher.com/timeline/v2/jsonp/20?session=MTIzNzgxOTE%3D&bundle=MQ%3D%3D&key=MWU3NTZiMDdhNjkwYzViZGIwNTQ%3D&lib=anM%3D&version=NC4zLjE%3D&cluster=ZXU%3D&features=WyJ3cyJd&timeline=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 net::ERR_BLOCKED_BY_CLIENT

Seems like this is the important stuff: ERR_BLOCKED_BY_CLIENT...

[Ashraf Teleb]

Thanks for your reply. There is a 500 error (internal server error), we'll check the server logs to find out the exception causing it.

To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/2461be5e-79dc-4644-994f-49fb4aaaf5f0n%40googlegroups.com.

[Alon Dean]

Hi, any news regarding this issue? It really is hard working with a 10 minutes session..

[Ashraf Teleb]

We're still investigating. For some accounts, Google returns 400 error with a very generic error message

https://www.googleapis.com/oauth2/v4/token
{ "error": "invalid_grant", "error_description": "Bad Request" }

To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/f835650d-794d-4788-ad24-7faba70437c3n%40googlegroups.com.

[clarjon1]

I wonder if it's like a corrupted oauth connection or something.

Would it be worth following the instructions in this guide to remove the authorization from the account completely, then re-authorize: https://support.google.com/accounts/answer/3466521?hl=en

To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/CAOg6tzTSOqNk%3DX2cgSqLrG%2BeTco8S2fgAzY7sgaUp647o-CQTg%40mail.gmail.com.

[Alon Dean]

All of my colleagues are experiencing the same issue so I don't think it's a problem only with my account
Still waiting for a solution, honestly, I'm considering other alternatives cause it's been months since I reported this issue and I just don't want to re-authenticate every 10 minutes, especially not during a 1 hour presentation I occasionally do.

[diagrams.net Q&A]

I would switch to an alternative, we haven't been able to recreate the issue, so I suspect it's something specific to your corp setup somewhere in the chain. Worth trying Miro, a lot of people like that.

[Matthias Vallentin]

I'm facing the exact same issue. Were there any known workaround or fixes deployed recently?

[diagrams.net Q&A]

We have never been able to recreate the issue. You'll save money in the long term picking an alternative solution.

[Romain BOYER]

Hello, I've got the same issue, the cookie is set to 10mn, this can't come from my device/browser, would you think to a way to have longer sessions?

I'm continuously asked to continue to authorize Google Drive access. 

If you guys can't repeat the bug, that's really weird because it seems to be setup that way.

thanks for your help!

[Ashraf Teleb]

Hi,

auth-state is a temporary cookie used during authentication only. Please look for auth-tocken... cookie(s) which should have longer age. These cookies are in /google response

Check if you have them and let us know

To view this discussion on the web, visit https://groups.google.com/d/msgid/drawio/f50fd45b-467c-491b-bac6-7a3795cda63bn%40googlegroups.com.