[Resolved] Using a different domain per language result in redirection problems at login

Hello,

There are some custom redirect rules inside the htaccess file about which I am not sure, why they are there. Could you please consult your hosting support about this:

RewriteEngine On
RewriteBase /
RewriteCond %{HTTPS} on [OR]
RewriteCond %{SERVER_PORT} ^443$ [OR]
RewriteCond %{HTTP:X-Forwarded-Proto} https
RewriteRule .* - [E=WPR_SSL:-https]
RewriteCond %{HTTP:Accept-Encoding} gzip
RewriteRule .* - [E=WPR_ENC:_gzip]
RewriteCond %{REQUEST_METHOD} GET
RewriteCond %{QUERY_STRING} =""
RewriteCond %{HTTP:Cookie} !(wordpress_logged_in_.+|wp-postpass_|wptouch_switch_toggle|comment_author_|comment_author_email_) [NC]
RewriteCond %{REQUEST_URI} !^(/je-signe/organismes/|/je-signe/je-signe-individu/|/je-signe/organismes-signataires/|/je-signe/citoyens-signataires/|/(?:.+/)?feed(?:/(?:.+/?)?)?$|/(?:.+/)?embed/)$ [NC]
RewriteCond %{HTTP_USER_AGENT} !^(facebookexternalhit|WhatsApp).* [NC]
RewriteCond "%{DOCUMENT_ROOT}/wp-content/cache/wp-rocket/%{HTTP_HOST}%{REQUEST_URI}/index%{ENV:WPR_SSL}%{ENV:WPR_WEBP}.html%{ENV:WPR_ENC}" -f
RewriteRule .* "/wp-content/cache/wp-rocket/%{HTTP_HOST}%{REQUEST_URI}/index%{ENV:WPR_SSL}%{ENV:WPR_WEBP}.html%{ENV:WPR_ENC}" [L]

Further, do you think we could disable WPML for a minute on your site in order to test if this issue is in fact WPML WPML-related?

Best regards
Andreas

Hello,

I created a copy of the .htaccess file and tested it with a basic default .htaccess file,

https://wordpress.org/documentation/article/htaccess/

This did not solve the issue and I reverted the changes.

---

The issue disappears once I disable the option "Auto sign-in and sign-out users from all domains", which adds the following parameter inside the URL when logging out:

wpml_sso_token

So I connected to the database to check the WordPress Options table and I found some transients that refer to this option.

I am not sure what is expected here, as there seem to be two SSO sessions on the DB.

I suggest that we try to remove those transients from the database and test if this solves the issue or escalate the issue internally without taking any further changes.

If you would like me to give it a try by removing those translations from the WordPress Options table, please take a backup of the database and then let me know when you are ready.

Best regards
Andreas

Hello,

Thank you!

It appears as if deleting those transients solves the issue, but once I access /wp-admin from the second domain the issue occurs again.

I will need to take a copy of the site for testing it on a virtual server and then take further internal steps.

I would like to ask you for some patience on this matter.

In the meantime, I suggest you disable the option "Auto sign-in and sign-out users from all domains" - this way users will have to log in manually if they want to access wp-admin from the second domain.

Best regards
Andreas

Hello,

I have tested with an identical copy of your website on localhost while using different domains per language with Apache, PHP 8.2.10, and MariaDB 10.4.10 and I can not confirm the the issue here.

This means that this behavior is related to your server.

Have you already consulted the hosting support about this issue?

Please tell them that your site is having issues with redirects when using an auto-login function on a different domain.

Maybe there are too many redirects active on your hosting panel?

Best regards
Andreas