https://lhero.org/portfolio/lh-beacon/ Digital Sovereignty for everyone Thu, 22 Oct 2026 19:47:07 +0000 hourly 1 https://lhero.org/portfolio/lh-beacon/#comment-1537645 Thu, 22 Oct 2026 19:47:07 +0000 https://lhero.org/?post_type=lh-portfolio&p=149600#comment-1537645 Fix nonce_invalid refusals after a sign-in and on stale cached pages. A visitor who signs in on a page sends that page’s logged-out nonce at pagehide, by which time the browser already holds the new login cookie, so the nonce failed against the new user. The collect route now falls back to accepting a logged-out nonce and dispatches the beacon as user 0, never as the user who just signed in. The script also refreshes the nonce at load when the page came from an old cache, instead of waiting until something is queued, so an error reported just before the tab hides no longer goes out with a stale nonce. The 30-minute check now calls the refresh through a wrapper so no timer argument can force it.

]]> https://lhero.org/portfolio/lh-beacon/#comment-1537478 Sat, 17 Oct 2026 14:40:11 +0000 https://lhero.org/?post_type=lh-portfolio&p=149600#comment-1537478 Stop LiteSpeed caching the nonce route. LiteSpeed’s REST cache was serving one stored response from /lh-beacon/v1/nonce to every logged-out visitor despite the no-cache headers, so the script’s refresh brought back a nonce that was itself stale and beacons from long-lived cached pages were refused as nonce_invalid. The route now opts out through LiteSpeed Cache’s litespeed_control_set_nocache action and the X-LiteSpeed-Cache-Control: no-cache response header.

]]>