Redirect loop on the sign-in page of gitlab.com when using the Tor Browser

Hello everyone,

I hope this place is appropriate for reporting issues with the gitlab.com instance. I found this forum by searching a problem I am having with the sign-in page and my search engine pointed me to this thread.

I am a happy user of Gitlab but I am unable to sign in from my favorite browser and this hurts my workflow. When connecting from the Tor network using the Tor Browser, the sign-in page of gitlab.com (https://gitlab.com/users/sign_in), keeps redirecting to itself. The content of the displayed page is

Checking your browser before accessing gitlab.com.
This process is automatic. Your browser will redirect to your requested content shortly.
Please allow up to 5 seconds…

By asking the Tor Browser to change its Tor circuit (as suggested here), I rarely manage to get the expected sign-in form but when I am lucky enough to get there ReCaptcha usually don’t let me in because it has already received too many request from my endpoint’s IP. So in my experience, connecting from Tor is technically possible but very cumbersome.

Please decide on a policy regarding whether or not you want users of gitlab.com to be allowed to connect from Tor. If you want to allow it, you can for example whitelist all Tor IPs or provide a hidden service. If you want to forbid it, please reject users with an error message instead of a redirection loop.

Thank you for all the efforts you put on the Gitlab software and on running the gitlab.com instance, and thank you for reading this!

4 Likes

Unfortunately I can confirm this is still an issue with one addition to note. There is occasionally a prompt to click to verify user presence else the described behavior by the original poster is identical. I have attempted to engage GitLab support and Tor Browser developers and the response has not been forthcoming.

Tested with Tor Browser 13.0.11 and 13.5a5 on Linux x86_64.

Any guidance is appreciated.

Thank you.

Big issue, i think all the major captcha providers have a war on TOR.