1376766 - [FirstPartyIsolation] Social login on focus.de not working with FPI

Status: NEW

(Core :: DOM: Security, defect, P3)

Description

[Oana Horvath [:ohorvath]]

Prerequisites:
Create the perf ""privacy.firstparty.isolate"" and enable it 
Disable the perf ""network.predictor.enabled""
Disable the perf ""network.predictor.enable-prefetch"" 
Disable the perf ""browser.safebrowsing.malware.enabled""
Disable the perf ""browser.safebrowsing.phishing.enabled"" 
Create the perf ""privacy.firstparty.isolate.restrict_opener_access"" and Enable it

Steps to reproduce:
1. Go to focus.de and open the login page.
2. Tap one of the social networks to login with.

Expected results:
The social network login page is opened and users can login to focus.de with that account.

Actual results:
Social login doesn't work. With fpi off, it works after pressing twice the same "Connect with..." button, but with fpi on it keeps returning to the login screen.

Comment 1

[Wesly Huang (EPM)]

Ethan, would you help check if this is something TPE SecEng team going to take? Thanks.

Comment 2

[Ethan Tseng [:ethan]]

Tim, please investigate this time when you have spare time, thanks.

Comment 3

[Wesly Huang (EPM)]

[triage@0719] +, as SecEng team is taking it.

Comment 4

[alexcurran1337]

FPI (Firefox Private Network) is a VPN service offered by Mozilla. It is possible that social login on focus.de is not working with FPI due to the VPN blocking certain scripts or cookies required for the social login process to work properly.

Here are some troubleshooting steps you can try:

Disable FPI: Turn off the FPI service and try logging in again to see if the social login works without the VPN. If it does, the issue is likely related to the VPN.

Clear browser cache and cookies: Clearing your browser cache and cookies can help resolve login issues. Go to your browser settings and clear the cache and cookies, then try logging in again.

Try a different browser: If the above steps do not work, try using a different browser without FPI enabled to see if the social login works.

Contact website support: If none of the above steps work, contact the website's support team for assistance. They may be able to provide additional troubleshooting steps or information specific to their website. Source https://sassachecker.co.za/

Comment 5

[dominicnelson]

Social login on focus.de not working with FPI" doesn't provide enough context for me to fully address the issue. However, I can provide some general information and suggestions based on common problems with social logins and FPI (Federated Personal Identifiers).

FPI Integration: Federated Personal Identifiers (FPI) are often used for managing user identities across multiple platforms or services. If social login is not working with FPI on focus.de, it could be due to misconfiguration or compatibility issues between the two systems.

Check Configuration: It's essential to verify that the FPI setup on focus.de is correctly configured to handle social logins. This includes ensuring that the necessary API keys, secrets, and callback URLs are correctly set up for each social login provider (e.g., Facebook, Google, Twitter).

Update Social Login APIs: Social login APIs occasionally update their protocols or endpoints, which may require updates to the integration on the website like (https://sassastatuscheck-online.co.za/). Ensure that the social login integration is using the latest API versions and endpoints provided by the respective social platforms.

Testing and Debugging: It's crucial to test the social login functionality thoroughly across different browsers and devices to identify any potential issues. Debugging tools provided by the social platforms and FPI services can help pinpoint specific errors or misconfigurations.

Error Handling: Implement robust error handling mechanisms to gracefully manage situations where social login fails. Provide clear error messages to users and log detailed information for developers to diagnose and troubleshoot issues effectively.

Reach Out to Support: If the issue persists, reaching out to the support teams of both the FPI service provider and the social login platforms can provide further assistance. They may offer insights or guidance specific to the integration scenario.

Community Forums and Documentation: Often, other developers may have encountered similar issues and shared solutions on community forums or in documentation provided by the FPI service and social login platforms. Searching these resources might yield helpful information.

Consider Professional Assistance: If resolving the issue requires specialized expertise or access to proprietary information, consulting with a developer experienced in FPI integrations and social logins could expedite the resolution process.