1668291 - Unable to log in to firefox sync - account locked, and api response bad request incorrect case

Status: RESOLVED FIXED

(Cloud Services :: Server: Firefox Accounts, defect)

Description

[dawid.dejager]

Attachment: accounts.firefox.com_Archive [20-09-30 13-31-40].tar.xz

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:81.0) Gecko/20100101 Firefox/81.0
Firefox for Android

Steps to reproduce:

try to log in to firefox sync
tried different versions, on my phone, waterfox, swapped secondary mail for main mail on the one machine still logged in, same result.

Even after changing email address, resonse still quotes original main email.

It's already been over 36 hours now

Actual results:

Sorry. We’ve locked your account.

The confirmation email we sent to [e-mail] was returned and we’ve locked your account to protect your Firefox data.

If this is a valid email address, let us know and we can help unlock your account.
No longer own that email? Create a new account
Back

HTTP/1.1 400 Bad Request
access-control-allow-origin: https://accounts.firefox.com
access-control-expose-headers: WWW-Authenticate,Server-Authorization,Timestamp,Accept-Language
cache-control: no-cache
Content-Type: application/json; charset=utf-8
Date: Wed, 30 Sep 2020 11:26:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains
Timestamp: 1601465186
vary: origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: DENY
x-xss-protection: 1; mode=block
Content-Length: 216
Connection: keep-alive

{
"code": 400,
"errno": 120,
"error": "Bad Request",
"message": "Incorrect email case",
"info": "https://github.com/mozilla/fxa/blob/main/packages/fxa-auth-server/docs/api.md#response-format",
"email": "[e-mail]"
}

Expected results:

I should have received confirmation code and / or be logged in

Comment 1

[Mark Hammond [:markh] [:mhammond] [PTO until Sept 7]]

(In reply to dawid.dejager from comment #0)

Created attachment 9178747 [details]
accounts.firefox.com_Archive [20-09-30 13-31-40].tar.xz

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:81.0) Gecko/20100101 Firefox/81.0
Firefox for Android

Firefox desktop has special handling for this case - and I suspect Firefox for Android doesn't. It's unfortunate the client has this special handling, but I've long ago lost all context of why the server can't just do the right thing here, but here we are.

try to log in to firefox sync
tried different versions, on my phone, waterfox, swapped secondary mail for main mail on the one machine still logged in, same result.

To be clear, is this failing for you on desktop Firefox? (I'm not sure if waterfox is using a fork of Firefox's FxA code or not - if it's not, I wouldn't be surprised to find it also doesn't have this hack)

Comment 2

[Ryan Kelly [:rfkelly]]

It's unfortunate the client has this special handling, but I've long ago lost all context of why the server can't just do the right thing here,
but here we are.

It's because the client has to hash the user's email address with the password as part of the login protocol, so it's important that it uses the same case as provided when the user created their account.

That said, I don't think that _createSession code linked above is actually called in practice, except when doing automated logins for TPS etc. The FxA web content should be the thing handling "incorrect email cases" errors.

I expect the issue here is that the account has been locked due to receiving too many bounces from the email address, and that removing this lock will get things working again. ni? :jbuck for further triage on that front.

Comment 3

[Jon Buckley [:jbuck]]

Hi there, Firefox Accounts received bounces from your email address. I've cleared these bounces, could you please add [e-mail] to your address book and try signing in again? Thanks!

+-------------------------+------------+---------------+---------------+
| email                   | bounceType | bounceSubType | createdAt     |
+-------------------------+------------+---------------+---------------+
| [e-mail] |          3 |             0 | 1599123437330 |
| [e-mail] |          3 |             0 | 1599405611807 |
| [e-mail] |          3 |             0 | 1599406352464 |
| [e-mail] |          3 |             0 | 1599406455847 |
+-------------------------+------------+---------------+---------------+