Closed Bug 1370003 Opened 7 years ago Closed 7 years ago

Not prompting for basic authentication (Intermittent)

Categories

(Core :: Networking: HTTP, defect, P3)

53 Branch
defect

Tracking

()

RESOLVED DUPLICATE of bug 1398506

People

(Reporter: robert, Assigned: mayhemer)

Details

(Keywords: steps-wanted, Whiteboard: [necko-backlog])

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
Build ID: 20170518000419

Steps to reproduce:

This is an intermittent problem.

I tried to visit a site I use regularly that uses HTTP and basic authentication.


Actual results:

I see a page from Apache that says "Authorization Rrquired... either you supplied the wrong credentials or your browser doesn't understand how to supply the credentials"

The request headers do not include "Authorization".


Expected results:

Firefox should have asked me for a password.  It didn't.

Shift/reload on the page makes no difference.  Visiting the same site in another window gets the same response.
After submitting this ticket, I restarted Firefox.

The window on the problem site re-opened, still showing "Authorization Required...."

But now, when I Shift/Reload, Firefox prompted me for a username and password, and I could log in.

And now, the request headers DO include "Authorization".
Summary: Not prompting for basic authentication → Not prompting for basic authentication (Intermittent)
Component: Untriaged → Networking: HTTP
Product: Firefox → Core
Should we understand that you can no longer reproduce the bug?
If you can still reproduce it, it would be very helpful if you could gather some logs using about:networking
See this link for instructions:
https://developer.mozilla.org/en-US/docs/Mozilla/Debugging/HTTP_logging
Flags: needinfo?(robert)
I've never been able to reproduce it.  That's why I added "Intermittent" to the summary.

I guess it has been happening roughly once every couple of weeks -- something like
a dozen times in "the last few months".

I realise that doesn't give anyone trying to fix the problem much to go on.
And next time I see the problem, I'll try the "about:networking", and add the details here.

But for now at least you know there is a problem!
Firefox CAN definitely get into a state where it does not prompt for 
or send any credentials when the server asks for them.

Robert.
Flags: needinfo?(robert)
Some logs would be extremely helpful, or at least some steps to reproduce. Moving to backlog until then.
Keywords: steps-wanted
Whiteboard: [necko-backlog]
Hello,

I had the same issue and I was able to reproduce it several times. I think it may be related to the debugger window, as the issue disappear when i close it. But I cannot reproduce it when I open another debugger window, it seems another thing trigger the issue.
I will try to gather more info next time i get it.

Hope it can help.

Best regards,
Nicolas L
After some more check, here how I reproduce it :
- Opening a first window, entering a URL requiring a basic auth, no issue.
- Open another tab, with another URL.
- Opening a separate debug window: as I configured my debugger to open as a separate window, i simply enable debug.
- Go back to the first tab, the basic auth prompt still appear
- Open another window
- Enter same URL requiring a basic auth, this time it goes directly to 401: no prompt


My version:

Paramètres de base de l’application
-----------------------------------

Nom: Firefox
Version: 53.0.3
Identifiant de compilation: 20170518000419
Canal de mise à jour: release
Agent utilisateur: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
Système d’exploitation: Windows_NT 10.0
Fenêtres multi-processus: 0/2 (Désactivé par des modules complémentaires)
Mode sans échec: false
(In reply to Nicolas Lann from comment #6)
> After some more check, here how I reproduce it :
> - Opening a first window, entering a URL requiring a basic auth, no issue.
> - Open another tab, with another URL.
> - Opening a separate debug window: as I configured my debugger to open as a
> separate window, i simply enable debug.
> - Go back to the first tab, the basic auth prompt still appear
> - Open another window
> - Enter same URL requiring a basic auth, this time it goes directly to 401:
> no prompt


Thanks for these steps to reproduce, Nicolas!

Before I try them myself, can you please test with the latest Nightly build (v56), downloadable at https://ftp.mozilla.org/pub/firefox/nightly/latest-mozilla-central/ ?

It would be better if you created a new profile for it according http://kb.mozillazine.org/Creating_a_new_Firefox_profile_on_Windows

Thanks.
Assignee: nobody → honzab.moz
Flags: needinfo?(archeide)
I just saw the problem again.

I remembered Nicolas Lann's comment.
I was fairly sure I had not used the debugger, BUT I did have "History/Show All History" open.

So I closed it, and reloaded the window -- and got prompted for credentials!

Not conclusive, but...
And again.  This time accidentally.
Earlier today, I opened "Show All History" and forgot about it.
A couple of minutes ago, I tried accessing a couple of sites that use HTTP basic Authentication.
I got the "Authorization Required" screen without being prompted for credentials.

When I realised what was happening, I closed the history window and re-loaded the protected page.
This time, I was asked for authentication...
Sorry for late reply here, but I can't reproduce with any of the STR from comment 6, 8 or 9.

When this happens, can you please turn on logging according https://developer.mozilla.org/en-US/docs/Mozilla/Debugging/HTTP_logging and submit the log here or send it to me to bugzilla email (to keep URLs private.)

Thanks.
Flags: needinfo?(robert)
I have never been prompted for basic authentication since upgrading to Seamonkey 2.48 (Mozilla/5.0 (X11; Linux x86_64; rv:51.0) Gecko/20100101 SeaMonkey/2.48) (I get identical behaviour from the official Windows 32 bit build).
Both https://login.mozilla.com/duo/ and https://auth-demo.aerobatic.io/protected-standard/ (examples borrowed from related bugs) take me straight to login failure pages without prompting for a user name or password. If I provide the user name and password in the URL in the form http://username:password@example.com/ then it works perfectly.
Seamonkey does not currently appear to have HTTP logging at about:networking, but I do have HttpFox installed, if that's any help.
Is bug #1318896 related to this one?
(In reply to Roger Lynn from comment #11)
> I have never been prompted for basic authentication since upgrading to
> Seamonkey 2.48 (Mozilla/5.0 (X11; Linux x86_64; rv:51.0) Gecko/20100101
> SeaMonkey/2.48) (I get identical behaviour from the official Windows 32 bit
> build).

Not sure how SeaMonkey differs from regular Firefox builds, but this bug report is dealing with Firefox.

> Seamonkey does not currently appear to have HTTP logging at
> about:networking, but I do have HttpFox installed, if that's any help.

If you are able to reproduce the bug in Firefox and gather logs, that would be really helpful.

> Is bug #1318896 related to this one?

That is an iOS bug. Completely different.
I(In reply to Valentin Gosu [:valentin] from comment #12)
> Not sure how SeaMonkey differs from regular Firefox builds, but this bug
> report is dealing with Firefox.

It's marked as being a core networking bug. It's likely to have similar effects in different builds.

> If you are able to reproduce the bug in Firefox and gather logs, that would
> be really helpful.

Sorry, I don't use Firefox.

> That is an iOS bug. Completely different.

But apparently identical symptoms. Is it a completely separate codebase?
(In reply to Roger Lynn from comment #13)
> But apparently identical symptoms. Is it a completely separate codebase?

Yes. https://github.com/mozilla-mobile/firefox-ios
I've filed bug #1398506 against Seamonkey.
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: -- → P1
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: P1 → P3
If I'm mistaken, please reopen.

Duplicate of bug 1398506.
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
(Note that patches in bug 1388166 and bug 1350152 - those that bug 1398506 has been fixed by - are touching the platform code)
Flags: needinfo?(robert)
Flags: needinfo?(archeide)
You need to log in before you can comment on or make changes to this bug.