Users other than admin cannot access fresh install - page has expired due to inactivity about freescout HOT 7 CLOSED

Check caching on your web server, proxies, CloudFlare, etc.

from freescout.

It was not a caching issue - the problem was this line in session.php:

'secure' => env('SESSION_SECURE_COOKIE', false),

As written, login pages could not be accessed via https, users had to use http (not intuitive). Once we knew this we were able to have people switch to http and things worked fine.

Can you add this to the documentation?

from freescout.

How to reproduce the issue?

1. Set APP_URL to use HTTPS: https://mysite.com in the .env file and clear cache.
2. Set SESSION_SECURE_COOKIE=true in the .env file and clear cache.
3. ...

from freescout.

The repro was a completely clean install, no changes to session.php.

Set app url - https://mysite.com

Create new user. User opens invite email. They immediately see the activity timeout error.

User manually goes to http://mysite.com/login - can use reset password from here.

from freescout.

We can't reproduce the issue. The problem may be in your web server or HTTPS configuration.

from freescout.

Can you help diagnose it more? This is just a regular server and we don't have any kind of unusual configuration. After attempting an update this is now happening to me constantly.

from freescout.

The only way to figure it out is to investigate on your server. You can email us at [email protected] or try https://github.com/freescout-helpdesk/freescout/wiki/Hire-Developer

from freescout.