1197368 - Unable to create a new account with Persona - receive 403

Status: RESOLVED DUPLICATE of bug 1197550

(Tree Management :: Treeherder, defect)

Description

[Kate McKinley [:kmckinley, :Kate]]

Attachment: Request & Response headers for login failure.

I am unable to create a new account in Treeherder with Persona.

See https://gist.github.com/sigkate/5d65ac356f23a6e0d3a2 for the full request / response headers & body

Comment 1

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

Do you block third-party cookies by any chance?

Comment 2

[Cameron Dawson [:camd]]

Seems like there could be a correlation with Django 1.8 and creating new users.  But I tried with an email that was unknown to Treeherder prod and it worked ok.  However, the email WAS already known to Persona.  And it was not an LDAP email.  So slightly different case than here.

I then tried with a new email not known to Persona.  It was able to log in after email verification ok.  Record created in DB.

So perhaps it's something with LDAP and new to treeherder?

Comment 3

[Kate McKinley [:kmckinley, :Kate]]

I do not block 3rd party cookies. History is set to Remember History.

Comment 4

[Ed Morley [:emorley]]

This has the same error message as the (slightly newer) bug 1197550 - forward duping there since flags/deps etc already set there.

I believe the behaviour seen in comment 2 here is just a case of "existing CSRF cookie set = no problems; new account/new profile means no existing cookie so broken", which matches the STR in bug 1197550 comment 1.

If it turns out to be separate, we can always reopen :-)