1151292 - Credentials from OVH Hubic lost after device reboot (B2G)

Status: RESOLVED WONTFIX

(Tech Evangelism Graveyard :: Preinstalled B2G Apps, defect)

Description

[:gerard-majax]

STR:
 0. Install hubiC for Firefox OS (https://hubic.com/fr/firefoxos)
 1. Login
 2. Reboot

Expected:
 When I reopen the app, my session is kept

Actual:
 I have to relogin

Comment 1

[vincent]

Hi!

I am one of the developer of this web application.

Currently, session system is based on cookies. It seems cookies are lost at reboot. There is anyway to avoid cookie to be deleted?

Best regards,
Vincent

Comment 2

[:gerard-majax]

I don't have problem with other services/apps. For instance Mediapart or Nextinpact.

Comment 3

[vincent]

I don't have account on mediapart or nextinpact.

Are you using this service as a website (inside Firefox browser) or as an application (declared with a manifest.webapp)?

Maybe the issue is located on kind of cookies used? (only_http, secured...)

Comment 4

[:gerard-majax]

(In reply to vincent from comment #3)
> I don't have account on mediapart or nextinpact.
> 
> Are you using this service as a website (inside Firefox browser) or as an
> application (declared with a manifest.webapp)?

As an application. And I know that some Gaia apps makes use of cookie for storing some data.

Comment 5

[:gerard-majax]

(In reply to vincent from comment #3)
> I don't have account on mediapart or nextinpact.
> 
> Are you using this service as a website (inside Firefox browser) or as an
> application (declared with a manifest.webapp)?
> 
> Maybe the issue is located on kind of cookies used? (only_http, secured...)

I checked with WebIDE, I see the proper cookies resent. I've sent you screenshots :)

Comment 6

[:gerard-majax]

So, PHPSESSID:

> ===== COOKIE ACCEPTED =====
> request URL: https://hubic.com/home/
> cookie string: PHPSESSID=xxx; path=/
> replaces existing cookie: false
> current time: Wed Apr 08 12:06:05 2015 GMT
> ----------------
> name: PHPSESSID
> value: xxx
> host: hubic.com
> path: /
> expires: Wed Dec 31 23:59:59 1969 GMT (at end of session)
> created: Wed Apr 08 12:06:05 2015 GMT
> is secure: false
> is httpOnly: false

Note the expire value.

Comment 7

[vincent]

Hi,

To be more detailed: this cookie is a "Session" cookie. That's why Expires tag is timestamp -1
By definition, "Session" cookies are deleted at the end of navigation (when you quit your browser). 

I think this behavior is not shown on browser with tabs reloading at launch.
So, we will fix it quickly :)

Comment 8

[:gerard-majax]

(In reply to vincent from comment #7)
> Hi,
> 
> To be more detailed: this cookie is a "Session" cookie. That's why Expires
> tag is timestamp -1
> By definition, "Session" cookies are deleted at the end of navigation (when
> you quit your browser). 

Yep, it's consistent.

> 
> I think this behavior is not shown on browser with tabs reloading at launch.
> So, we will fix it quickly :)

Do you experience the same behavior when closing and restarting the browser itself ? If so, I think we should maybe dupe this against bug 1033355.

Comment 9

[vincent]

Hum, when I use the browser on firefox OS 1.3 to go on hubic webapplication, my session is not deleted when I close the browser (with closing the app and not only switch to another).
If I restart the phone, session is lost inside the browser.

So: Session cookies are cleaned only at reboot?

And second question: in installed application context, session cookies should be destroy at reboot or keep inside mobile phone?