fixed issue with sessions that lead to redirection loops

rhodecode/controllers/login.py

@@ -73,7 +73,7 b' class LoginController(BaseController):'
                 # If they want to be remembered, update the cookie
                 if c.form_result['remember'] is not False:
                     session.cookie_expires = False
-                    session._set_cookie_values()
+                session._set_cookie_values()
                 session._update_cookie_out()
                 session.save()
 

rhodecode/lib/auth.py

@@ -355,6 +355,8 b' class AuthUser(object):'
                     setattr(self, k, v)
                 self.set_authenticated()
                 is_user_loaded = True
+        else:
+            log.debug('No data in %s that could been used to log in' % self)
 
         if not is_user_loaded:
             # if we cannot authenticate user try anonymous
@@ -661,12 +663,13 b' class PermsFunction(object):'
 
     def __call__(self, check_Location=''):
         user = request.user
+        log.debug('checking %s %s %s', self.__class__.__name__,
+                  self.required_perms, user)
         if not user:
+            log.debug('Empty request user')
             return False
         self.user_perms = user.permissions
         self.granted_for = user
-        log.debug('checking %s %s %s', self.__class__.__name__,
-                  self.required_perms, user)
 
         if self.check_permissions():
             log.debug('Permission granted %s @ %s', self.granted_for,

rhodecode/lib/base.py

@@ -136,7 +136,6 b' class BaseController(WSGIController):'
             cookie_store = CookieStoreWrapper(session.get('rhodecode_user'))
             user_id = cookie_store.get('user_id', None)
             username = get_container_username(environ, config)
-
             auth_user = AuthUser(user_id, api_key, username)
             request.user = auth_user
             self.rhodecode_user = c.rhodecode_user = auth_user