1774567 - Cannot connect to Asana widget from Zendesk website with TCP enabled

Status: VERIFIED FIXED

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Cosmin Muntean [:cmuntean], Ecosystem QA - PTO until 18 Sept - ping mcoman for any question]

Attachment: Cannot connect to Asana widget from Zendesk.mp4

[Notes]

• The issue is only reproducible when trying to connect to Asana widget from Zendesk. However, it is not reproducible if connecting to Zendesk widget from Asana.
• If ETP is turned off or is set back to Standard from "about:preferences" page, the issue is no longer reproducible. You can successfully connect to Asana widget from Zendesk.

[Affected versions]:

• Firefox Release 101.0.1 (Build ID: 20220608170832)
• Firefox Beta 102.0b8 (Build ID: 20220614185842)
• Nightly 103.0a1 (Build ID: 20220615214908)

[Affected Platforms]:

• Mac 12.4
• Windows 10 x64
• Linux Mint 20

[Prerequisites]:

• Have an Asana account created and logged in.
• Have a Zendesk account created and logged in.
• Have Asana widget installed to Zendesk. You can install it from here.
• Have the Strict option enabled from "about:preferences" page.
  OR
• Be enrolled in the ETP Phase II or Phase III rollout. You can force enroll by setting the "nimbus.debug" to true and navigate to about:studies?optin_slug=total-cookie-protection-beta-roll-out-phase-ii-switch-on-to-new-users&optin_branch=control. Note that a restart is required.

[Steps to reproduce]:

1. Open the Firefox browser with the profile from prerequisites.
2. In the Zendesk page, click the "Views" button from the left sidebar.
3. Select the Sample ticket (which is created by default).
4. Click the "Apps" button from the right part.
5. Click the "Connect to Asana" button displayed in the right part.
6. Observe the behavior.

[Expected result]:

• You are successfully connected to Asana and the ticket can be created.

[Actual result]:

• You are not connected to Asana and the "Connect to Asana" is re-displayed.

[Notes]:

• Attached is a screen recording of the issue.

Comment 1

[Emma Zühlcke [:emz]]

Thanks! Do you have test accounts I could use for Asana and Zendesk to reproduce the issue locally?

Comment 2

[Cosmin Muntean [:cmuntean], Ecosystem QA - PTO until 18 Sept - ping mcoman for any question]

Sure, Marius will share with you the test accounts on slack. Let me know if you need more information.

Comment 3

[Emma Zühlcke [:emz]]

Thanks for sharing the test accounts. This is indeed TCP breakage. It is fixed by granting https://zendesk.integrations.asana.plus first-party storage access under https://*.zendesk.com. Short-term we can shim this, but we should reach out to Zendesk so they can integrate the Storage Access API if possible.

Comment 4

[Emma Zühlcke [:emz]]

This is still broken with the allowlist entry disabled. It doesn't work in Safari either.
Since it's currently allowlisted I'm lowering the severity and I'm unassigning myself.

I've reached out to Asana to inform them about the breakage via their support email.

Comment 5

[Tim Huang[:timhuang]]

Cosmin, could you verify again to see if we still have this issue? Thanks.

Comment 6

[Cosmin Muntean [:cmuntean], Ecosystem QA - PTO until 18 Sept - ping mcoman for any question]

Hey Tim! Unfortunately, the test accounts that I have used are no longer working. I have tried to create new ones but they required different company information which I am not able add.
I will ask around to see if someone has working accounts for both Asana and Zendesk.

Comment 7

[Dan Mehic]

Hi Cosmin, any updates on working accounts? Thanks

Comment 8

[Cosmin Muntean [:cmuntean], Ecosystem QA - PTO until 18 Sept - ping mcoman for any question]

Attachment: zendex asana 1.mp4

Hi Dan!

Sorry for the late response. I have managed to activate an old test account and retest the issue.

Unfortunately, the issue is still reproducible. I have tested it on Firefox Release 136.0.2 (Build ID: 20250317120031), Firefox Beta 137.0b7 (Build ID: 20250317100200), and the latest Nightly 138.0a1 (Build ID: 20250323204755) on Windows 10 x64.
I have tested this on new Firefox profiles with the default behavior, I haven't changed any settings regarding the TCP feature.

I cannot manage to connect to Asana while TCP is enabled. If I disable TCP, I am successfully connected. I have attached a screen recording.

Comment 9

[Tim Huang[:timhuang]]

Attachment: Bug 1774567 - Introduce a shim to fix Zendesh Asana Support integration. r?twisniewski!,#anti-tracking!

Comment 10

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/fa8fd6b78a90
Introduce a shim to fix Zendesh Asana Support integration. r=twisniewski,anti-tracking-reviewers,webcompat-reviewers,emz

Comment 11

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/fa8fd6b78a90

Comment 12

[Cosmin Muntean [:cmuntean], Ecosystem QA - PTO until 18 Sept - ping mcoman for any question]

HI Tim!

I have retested this issue using the latest Nightly 139.0a1 build (Build ID: 20250422213740), but I can still reproduce it. I have verified this using a new Firefox profile on Windows 10 x64.

The old subdomain expired, and I have created a new one: yahoo3568.zendesk.com.
Is this issue fixed on your end?

Comment 13

[Tim Huang[:timhuang]]

The shim only works after you refresh the Views page. I think it's because of how the Zendesk page navigates between pages. It doesn't trigger the injecting shims script. I think we need to update the match pattern for the shim script. I will open another bug to update it.

Comment 14

[Cosmin Muntean [:cmuntean], Ecosystem QA - PTO until 18 Sept - ping mcoman for any question]

Bug 1962140 was fixed and verified. I can successfully connect to Asana widget from Zendesk website with TCP enabled, each time I have tried.

Considering this, I will also mark this issue as verified-fixed.