The _uid part is stripped from the URL during automatic login

tari

When autologin is enabled, and we open a new browser session with something like

https://webmail.opalstacked.com/?_task=mail&_mbox=INBOX&_uid=1000

...the _uid part is stripped away, so we land in limbo, rather than the viewing the requsted message.

(Before autologin was implemented, the link took the user to the message after the login screen)

sean

tari you can avoid this by including &_action=show in your URL, eg: https://webmail.opalstacked.com/?_task=mail&_mbox=INBOX&_uid=1000&_action=show

tari

Thanks for the reply.

Adding &_action=show was the first thing I tried. Tried it again a moment ago, just in case, but the result is the same.

sean

tari Can you give me an example of the URL that appears in your address bar once you end up in limbo?

Feel free to redact whatever info as needed, but ensure that all of the parameter names are present.

sean

tari never mind, I was able to reproduce this.

What I see is _mbox=INBOX&_uid=1000 being replaced with a token=XXXXXXXXXXX value, and I end up at the message window, minus the message info.

We're using a third-party plugin for the persistent login feature, but I'll try to track down where this behavior is coming from and then either open an issue or PR with the developer.

tari

sean That's exactly what happens. If you omit the &_action=show you end up in the inbox, minus the message selection.