1555591 - Javascript API error: download() method won't include cookies

Status: RESOLVED DUPLICATE of bug 1561654

(WebExtensions :: General, defect, P3)

Description

[Tamás Tringer]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

Steps to reproduce:

Calling Javascript API's browser.downloads.download() method in an Add-on to download files after authenticated on a webserver using https.
(The Add-on worked fine until version 67.)

Actual results:

The server throws an unauthenticated error, because of the missing cookies

Expected results:

The download() method includes the cookie (as the documentation said) which stores the authentication and the download begins.
The error is that the cookie isn't included when sending the get request.

Comment 1

[Alex Cornestean]

Hi,

Can you please provide the extension you used to obtain the above mentioned results. Thanks !

Comment 2

[Tamás Tringer]

Hi,
The extension can be downloaded from here:
https://addons.mozilla.org/hu/firefox/addon/etdr_tomeges_letoltes/

The source code is here:
https://github.com/tringert/ETDR_FF_extension

Comment 3

[Alex Cornestean]

Attachment: Beta+Nightly warning.png

Comment 4

[Alex Cornestean]

Attachment: Release warning.png

Comment 5

[Alex Cornestean]

Hello,

While attempting to reproduce the issue on the latest Nightly, Beta and Release versions of Firefox under Windows 10 64-bit, on downloading and installing/uninstalling the mentioned add-on, I’ve got several cookies related warnings in the console (please see the attachments).

Can you please confirm that these are indeed the same errors/warnings you obtained, before proceeding with further tests?

Comment 6

[Tamás Tringer]

Attachment: FF_67.0_no_warning.png

Comment 7

[Tamás Tringer]

Attachment: FF_Developer_Edition_68.0b5_warning.png

Comment 8

[Tamás Tringer]

Hello,
I didn't get any notification about the error when downloading with the add-on. It's just silently downloads the http response sent by the server (as a file) because lack of authentication (the download request didn't include the auth cookie).

Looking at the console when installing/uninstalling the notification

• on the core version (67.0) isn't present, but
• on the Developer Edition (68.0b5) it can be found.

I hope it will help.