6

Searching for "WordPress Reauth" and the like all result in folks who are having problems with ReAuth=1. What exactly is ReAuth?

7

ReAuth=1 is required when your login Cookies are no longer valid, WordPress will force validation for your browser.

if ( $force_reauth ) 
    $login_url = add_query_arg('reauth', '1', $login_url);
  • Add reauth=1 flag to login url when auth_redirect() redirects to wp-login.php after the auth cookie fails validation wp-login.php clears cookies and forces log in if reauth=1.
  • If reauth=1 wp-login.php does not attempt to redirect to wp-admin, even if the cookie seems good.

Basically, this forces reauth/login whenever auth_redirect() does not think the user is logged in. This should resolve the situation where one cookie seems good but another does not.

--- Ryan via Trac 12142

To fix issues with this you can clear your cookies and change your Security Keys, or use wp_set_auth_cookie.

Some reference:
http://digwp.com/2010/09/wordpress-security-keys/ http://codex.wordpress.org/Function_Reference/wp_set_auth_cookie

  • Excellent! That would make a lot of sense. – Jordan Thornquest Mar 13 '13 at 17:21
  • @Wyck - THANK YOU for the best answer I've read regarding this issue! THANK YOU!!! – DaveyJake Jan 23 '16 at 0:59
  • Thanks for the info! just call wp_clear_auth_cookie() if anybody making a custom login and had a GET reauth. – Samuel Elh Jan 29 '17 at 18:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for?Browse other questions tagged or ask your own question.