grafana登录失败无法从cookie中获取用户信息

小鱼儿 2022-12-23 12:25 360阅读 0赞

## 背景 ##

grafana从版本6.3升级到7.2.1，通过chrome浏览器无法登录，需要清除浏览器缓存会话才可以正常登录，这样用户体验并不好，不可能使得所有用户都要在登录前都清除一下浏览器缓存会话。

### chrome 版本信息 ###

> <table> 
>  <tbody> 
>   <tr> 
>    <td>Google Chrome</td> 
>    <td>86.0.4240.198&nbsp;(正式版本)&nbsp;（64 位）&nbsp;(cohort: Stable)</td> 
>   </tr> 
>   <tr> 
>    <td>修订版本</td> 
>    <td>d8a506935fc2273cfbac5e5b629d74917d9119c7-refs/branch-heads/4240@{#1431}</td> 
>   </tr> 
>   <tr> 
>    <td>操作系统</td> 
>    <td>Windows&nbsp;10 OS Version 1909 (Build 18363.1198)</td> 
>   </tr> 
>   <tr> 
>    <td>JavaScript</td> 
>    <td>V8&nbsp;8.6.395.25</td> 
>   </tr> 
>   <tr> 
>    <td>Flash</td> 
>    <td>32.0.0.453</td> 
>   </tr> 
>  </tbody> 
> </table>

###  服务端报错信息 ###

> t=2020-11-24T18:45:34+0800 lvl=info msg="Successful Login" logger=http.server User=admin@localhost  
> t=2020-11-24T18:45:34+0800 lvl=eror msg="Failed to look up user based on cookie" logger=context error="user token not found"

## 问题排查 ##

> Cookie path
> 
> Starting from Grafana v7.0.0, the cookie path does not include the trailing slash if Grafana is served from a subpath in order to align with RFC 6265. However, stale session cookies (set before the upgrade) can result in unsuccessful logins because they can not be deleted during the standard login phase due to the changed cookie path. Therefore users experiencing login problems are advised to manually delete old session cookies, or administrators can fix this for all users by changing the login\_cookie\_name, so the old cookie would get ignored
> 
> 从Grafana v7.0.0开始，如果为了与RFC 6265对齐从一个子路径提供Grafana, cookie路径就不包括末尾的斜杠。但是，陈旧的会话cookie(在升级之前设置)可能导致登录不成功，因为由于更改了cookie路径，在标准登录阶段无法删除它们。因此，建议遇到登录问题的用户手动删除旧的会话cookie，或者管理员可以通过更改login\_cookie\_name为所有用户修复这个问题，这样旧的cookie就会被忽略

简单翻译一下就是你从6版本跨度到7版本陈旧的会话cookie不启作用了。

## 如何解决 ##

两种方法

客户端清除浏览器会话缓存

服务端修改login\_cookie\_name后重启grafana服务

## 验证 ##

打开浏览器开发者模式会发现新增一个新的会话名称grafana\_monitor\_session

![20201125094502173.png][]

资料参考：

[https://grafana.com/docs/grafana/latest/installation/upgrading/\#cookie-path][https_grafana.com_docs_grafana_latest_installation_upgrading_cookie-path]

[https://grafana.com/docs/grafana/latest/administration/configuration/\#cookie\_secure][https_grafana.com_docs_grafana_latest_administration_configuration_cookie_secure]

[20201125094502173.png]: /images/20221120/d989ee1e42e748c9a546554feec5a8f2.png
[https_grafana.com_docs_grafana_latest_installation_upgrading_cookie-path]: https://grafana.com/docs/grafana/latest/installation/upgrading/#cookie-path
[https_grafana.com_docs_grafana_latest_administration_configuration_cookie_secure]: https://grafana.com/docs/grafana/latest/administration/configuration/#cookie_secure