924707 - wrong domain given in error message about third-party cookies

Status: RESOLVED INCOMPLETE

(Cloud Services :: Server: Identity, defect)

Description

[Dave Miller [:justdave]]

Attachment: Screen Shot 2013-10-08 at 9.06.45 PM.png

When logging into Persona with a mozilla.com address with third-party cookies disabled, you get an error message which states you need to enable third-party cookies for "mozilla.com" in order to use Persona.  This is incorrect, and adding this domain to your third-party cookies exceptions does not work.

The correct domain that needs an exception is "login.mozilla.org"

I'm pretty sure this also only applies to mozilla.com and mozillafoundation.org email addresses.  Hopefully this message is specific to the domain (I'm sure google logins need some google domain to be whitelisted, for example).

Comment 1

[Dave Miller [:justdave]]

Attachment: Screen Shot 2013-10-08 at 9.20.18 PM.png

OK, as this screenshot demonstrates, it appears to be putting the user's domain-part of their email address as the domain that needs an exception.  This is not correct in either case.  It should be the domain of the IDP that gets used for this message, not the domain part of the email address.

Comment 2

[Peter deHaan [:pdehaan]]

(In reply to Dave Miller [:justdave] ([e-mail]) from comment #0)
> Created attachment 814667 [details]
> Screen Shot 2013-10-08 at 9.06.45 PM.png
> 
> When logging into Persona with a mozilla.com address with third-party
> cookies disabled, you get an error message which states you need to enable
> third-party cookies for "mozilla.com" in order to use Persona.  This is
> incorrect, and adding this domain to your third-party cookies exceptions
> does not work.
> 
> The correct domain that needs an exception is "login.mozilla.org"
> 
> I'm pretty sure this also only applies to mozilla.com and
> mozillafoundation.org email addresses.  Hopefully this message is specific
> to the domain (I'm sure google logins need some google domain to be
> whitelisted, for example).

Filed in GitHub as https://github.com/mozilla/browserid/issues/3966

Comment 3

[Jared Hirsch [:jhirsch] (he/him) (Needinfo please)]

:justdave, I'm closing this in favor of the github bug. I've referenced @justdave in the github bug (which I assume is your github handle) so that you're added to any conversation there (assuming your github notifications are sorted).

:pdehaan thanks for transferring the bug from here to there, :beers:

Comment 4

[Dave Miller [:justdave]]

Yep, that's me. I had already flagged that big for my watch list anyway :)

thanks

Comment 5

[Peter deHaan [:pdehaan]]

Goooooo team!

Thanks for the report, Dave! Keep em coming [in GitHub]!