Safari Stuck In Login Loop
tracked
MisutaaAsriel
When logging in to vrchat.com/home with Safari on macOS Sonoma & up, website gets stuck in a login loop.
Process goes as follows:
- User is redirected to login page
- User logs in
- User enters their 2FA
- The home dashboard is displayed for about 1 second, complete with accurate user info
- Console reports "[AuthorizedRoutes] Failed to load user, going to /login"
- Login immediately reloads
Additional notes:
- Clearing Website Data (Cookies + Cache) followed by a complete quit of the web app or Safari instance hosting the VRChat website previously provided a temporary workaround. As of macOS Sequoia this no longer works.
Log In
StormRel
tracked
MisutaaAsriel
StormRel as a note this is still happening at random on Sequoia.
StormRel
MisutaaAsriel: Is this still happening on Safari for you?
MisutaaAsriel
StormRel yes, but interestingly enough, it is more consistently reproducible in the web-appified version. — if you open the vrchat homepage and log in, then "Add to Dock" with a recent version of Safari, it creates a standalone Safari browser with isolated cookies and no browser controls.
Using the VRChat web portal from here seems to more consistently enter the login loop. It still occasionally happens in Safari proper as of a month ago, directly, but as of late it is more stable, albeit all my cookies had expired.
I'm wondering if how Safari web apps on Mac work is exasperating this issue; It has been a hot minute since I checked, but if I recall vrchat stores cookies for both vrchat.com and another domain, or at least did at one time. Maybe the cookies are mismatched somehow? (Shot in the dark here. May have just been a red herring.)
MisutaaAsriel
StormRel Interesting development: As of macOS 15.1 (24B83) it now does this irregardles of if I clear VRCHAT's cookies and site data (both .com and .cloud), BUT... It works in Private Browsing. This suggests that there is website data that
isn't
getting cleared, not tied to vrchat.com nor vrchat.cloud.Are there any other domains VRChat's portal relies on for login data, or stores data under?
MisutaaAsriel
StormRel attached is a video of the loop in question. There is no user input after the initial click on the login button. These loops are autonomous.
0x6f78
MisutaaAsriel I thought im the only one but it seems not. I also have sometimes randomly these login loops on iOS, clearing cache, closing safari sometimes helps but not all the time, most of the time it just get into the loop again.
What I noticed is that this mostly happens if you have iCloud Private Relay turned on, when I turn off iCloud Private Relay then it works fine, no loop.
MisutaaAsriel
0x6f78 Innnntereessssting. This would suggest VRCHAT, or one of their partners, is using your IP or location in a way which breaks if the information associated with a specific login doesn't match.
I'll run some tests, both with turning Private Relay
off,
and by disabling it just for VRCHAT.com, and report with the results when I'm done.MisutaaAsriel
0x6f78 StormRel I can confirm using iCloud Private Relay, an IP anonymization proxy (colloquially referred to as a "VPN" by most) built into iOS & macOS does in fact cause the issue on iPad, at the very least. Choosing to temporarily show my IP results in a successful login.
I would check your systems security measures to ensure it's not erroneously deauthorizing users with anonymized IP addresses when making API calls.
EDIT:
I can fully confirm that choosing "Show IP Address" in Safari temporarily
remedies the issue. Note that this is temporary
, as Private Relay has no allow/block list functionality. Likewise, this will not work with web apps
(the VRChat web portal added to the dock or via a Web Clip) as they do not have the Safari UI elements necessary to access the "Show IP Address"/"Reload and Show IP Address" option.