If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

The 'Bugzilla_github_token' cookie is always set even when not using GitHub auth

NEW
Unassigned

Status

()

bugzilla.mozilla.org
Extensions: GitHubAuth
2 years ago
2 years ago

People

(Reporter: emorley, Unassigned)

Tracking

Production

Details

(Reporter)

Description

2 years ago
Using 2015-09-06 Firefox Nightly:

1) Clear all auth related BMO cookies
2) Log into BMO using native login username+password (ie not persona or GitHub auth)
3) Inspect cookies set for bugzilla.mozilla.org

Expected:
"Bugzilla_github_token" cookie not set.

Actual:
"Bugzilla_github_token" set.


(on a similar note, is it expected that "Bugzilla_login_request_cookie" stays around, even after login?)
You need to log in before you can comment on or make changes to this bug.