1336458 - [FirstPartyIsolation] Unable to login using Facebook on As.com

Status: NEW

(Core :: DOM: Security, defect, P3)

Description

[Bogdan Maris, Desktop Test Engineering]

[Note]:
-

[Affected versions]:
-

[Affected platforms]:
-

[Steps to reproduce]:
1.

[Expected result]:
-

[Actual result]:
-

[Regression range]:
-

[Additional notes]:
-

Comment 1

[Bogdan Maris, Desktop Test Engineering]

[Affected versions]:
- Firefox 52 beta 2
- latest Dev Edition 53.0a2
- latest Nightly 54.0a1

[Affected platforms]:
- macOS 10.12.2
- Ubuntu 16.04 32-bit
- Windows 10 64-bit

[Steps to reproduce]:
1. Visit As.com and login using Facebook

[Expected result]:
- Login is successful.

[Actual result]:
- User was not successfully logged in with Facebook account.

[Regression range]:
- This is not a regression.

Comment 2

[Bogdan Maris, Desktop Test Engineering]

With pref 'privacy.firstparty.isolate.restrict_opener_access' set to 'false' this is still reproducible. After entering facebook credentials and hitting login, as.com login webpage refreshes and does not login. Using Tor browser, the user is successfully logged in to As.com after entering Facebook credentials. 
Removing tracking status for 52 and 53 since this does not affect normal users.

Comment 3

[Tim Huang[:timhuang]]

This website can log in successfully when I disabled third party cookies. So, I believe that the login mechanism of 'as.com' is depending on third party cookies. And when we disable third party cookies, it will detect it and use a different way other than third party cookies to log in.