1

Are you using stock Docker compose setup?

Yes

If not, either reproduce this issue on the official demo or switch to Docker and see if the issue is resolved.

Describe the problem you’re having:

TTRSS android (official app) works fine except for subscribing to feeds using the subscribe with ttrss in android share menu. It gives an error saying : ‘username or password incorrect’

log on server says (ip redacted)
Failed login attempt for admin (service: _api) from <>

Real IP: <>
Forwarded For: <>
Forwarded Protocol: http
Remote IP: <>
Request URI: /tt-rss/api/
User agent: Tiny Tiny RSS (Android) 1.300 (534) Dalvik/2.1.0 (Linux; U; Android 9; SM-G950F Build/PPR1.180610.011)

Include steps to reproduce the problem:
open website in mobile chrome → go into share menu → subscribe with ttrss → wait for categories to update → subscribe (should show error now)
tt-rss version (including git commit id):

v21.06-9669bb94d

Platform (i.e. Linux distro, PHP, PostgreSQL, etc) versions:
Ubuntu server 20.04, PHP 8.0.6 (using docker compose), postgres 12 latest, AWS graviton2 instance (2 core, 1 gb ram)
Please provide any additional information below:

I tried resetting my password, and restarting my phone, and redownloading the ttrss app, but none of those worked. Also this worked just fine until yesterday, I’m not sure what changed.
Also, subscribing to feeds within the app works fine… mostly. It sometimes errors out with the same error. On further investigation, it seems to happen if I click the subscribe button too soon after the categories load in. Although waiting for any amount of time in the share menu popup doesn’t help.

UPDATE

So I think I found the source of the problem in the logs
|E_WARNING (2)|classes/api.php:825|Undefined array key “password”
|E_WARNING (2)|classes/api.php:824|Undefined array key “login”

The rest of the error message is the same as the one above

I’m also seeing

E_USER_NOTICE (1024) :0 Too many authentication attempts for admin, throttled.

NEW UPDATE
so setting AUTH_MIN_INTERVAL to 0 fixed the issue.
Would it be possible to not have the android modal dialog try to login everytime? I’m not certain how ttrss works but if it’s already logged in on the phone should it have to reauthenticate?

2

i dunno, i’ve just tried it and it seems to work properly. however, i’m using 2FA with an app password, which could affect this somehow.

i’d like to see more reports before i start digging.

3

so setting AUTH_MIN_INTERVAL to 0 fixed the issue.
Would it be possible to not have the android modal dialog try to login everytime? I’m not certain how ttrss works but if it’s already logged in on the phone should it have to reauthenticate?

4

its likely done like this because rest of the app might not be running when you invoke this dialog, so it has to be its own thing.

app passwords are not throttled so you could use one instead as a workaround.

5

Yep, thank you very much!

It would be good to improve the error message on the phone though, because it’s not necessarily wrong username or password.

6

yeah i agree that this doesn’t work very well right now but i’m not sure how to fix it properly. maybe some time.

e: maybe successfull login attempts should not be throttled