Bug Report: GitHub OAuth login enters an infinite redirect loop
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 42/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- github
- Domain
- authentication
Research direction
Start by reproducing the flow at https://app.codecov.io/login in Microsoft Edge on Windows, then trace the GitHub OAuth callback and session handling described in the report. Investigate why the authenticated state is lost after GitHub redirects back; done means authorization returns the user to Codecov and keeps them logged in without another redirect.
Written by the indexing model from the issue text.
Description
GitHub OAuth login enters an infinite redirect loop
Description
I’m unable to log in to Codecov using GitHub.
The authentication flow enters an infinite redirect loop:
- Go to https://app.codecov.io/login
- Click Log in with GitHub.
- GitHub opens and asks me to authorize Codecov.
- I authorize Codecov successfully.
- I’m redirected back to Codecov.
- Codecov sends me back to the login page and asks me to authenticate with GitHub again.
- The same flow repeats indefinitely.
There is no error message shown. The GitHub authorization appears to succeed, but Codecov does not keep the authenticated session and starts the login flow again.
Expected behavior
After successfully authorizing Codecov on GitHub, I should be redirected to Codecov and remain authenticated.
Actual behavior
The GitHub OAuth flow continuously redirects between GitHub authorization and the Codecov login page, making it impossible to access the Codecov application.
Steps to reproduce
- Open https://app.codecov.io/login
- Select Log in with GitHub.
- Authorize Codecov on GitHub.
- Wait for the redirect back to Codecov.
- Observe that Codecov returns to the login page.
- Repeat indefinitely.
Environment
- Browser: Microsoft Edge 147
- OS: Windows
- Authentication provider: GitHub
- Codecov URL: https://app.codecov.io/login
Additional information
The issue appears to be related to the GitHub OAuth/session callback, since GitHub authorization completes successfully but the authenticated session is not retained by Codecov.
Please investigate the OAuth callback/session handling and why the authenticated state is lost after returning from GitHub.
- Dominant language
- No language data
- Stars
- 52
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from codecov/feedback
-
Docs Waiting for: Product Owner
Difficulty 1/5 Under an hour Newbie friendliness 65/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
Bug ReportOpen
Difficulty 5/5 Over a week Newbie friendliness 10/100
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
All issues in codecov/feedback
Similar issues
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 83/100
btclib-org/btclib-wallet#267 ·
Maintainers usually reply within 1 day
-
[duplicate-code] Duplicate Code: pull_request event detection duplicated across safe_update filesOpenautomated-analysis code-quality cookie duplication
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
area: assistant
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
area/security
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
agent-substrate/substrate#2276 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
tauri-apps/tauri#16219 ·
Maintainers usually reply within 2 days