1802340 - Unable to login on tsn.ca with ETP set to Standard

Status: VERIFIED FIXED

(Core :: Privacy: Anti-Tracking, defect, P2)

Description

[Danny Colin [:sdk]]

See: https://github.com/webcompat/web-bugs/issues/114567

Comment 1

[Tim Huang[:timhuang]]

Raul, do we have a test account for this website? Thanks.

Comment 2

[Raul Bucata]

Sorry for the late reply, Tim. I am afraid only the reporter has an available account, as payment is needed to create a test account.

Comment 3

[Thomas Wisniewski [:twisniewski]]

I also don't have a test account, but it looks like what's happening is that their sign-in link takes you to an interstitial page:

https://account.bellmedia.ca/login?action=signin&fallback=https%3A%2F%2Fwww.tsn.ca%2Fbin%2Fum%2Fsignin.tsn.html&service=tsn&continue=https%3A%2F%2Fwww.tsn.ca%2F#

When I click the sign-in button on that page, I see our shim for Crave kicking in:

Calling the Storage Access API on behalf of https://www.crave.ca crave-ca.js:39:13
Storage access granted for origin “https://www.crave.ca” on “https://account.bellmedia.ca”. 

So that part works, and I'm guessing that upon successful login they try to redirect back to tsn.ca, and it fails at that stage. I will try to confirm that with Danny (the bug reporter) if he still has a login.

Comment 4

[Thomas Wisniewski [:twisniewski]]

Hmm, it seems that Danny no longer has an account, so we're stuck until we can get one.

Comment 5

[Tim Huang[:timhuang]]

Hello Calin, does the QA team has an account for tsn.ca?

Comment 6

[Calin Tanase]

Hi Tim, unfortunately, we don't have one.

Comment 7

[Simmon Li [:crespire]]

Folks, I am happy to provide a set of credentials for testing, but the site also has georestrictions to Canada, so it would be ideal for the team working on this to also have someone based in Canada.

Comment 8

[Simmon Li [:crespire]]

If you want to get in touch with me, you can email me at [e-mail] and I'd be happy to help

Comment 9

[Tim Huang[:timhuang]]

Attachment: Bug 1802340 - Add a shim for tsn.ca to address login issue with dFPI. r?#anti-tracking-reviewers!,#webcompat-reviewers!

Adding a shim that calls privilege StorageAccessAPI when tsn.ca using
the bellmedia.ca to perform the login.

We update the matching rule for the content script of crave.ca because it
also uses the bellmedia to do the login. With the updated matching rule,
we will only load the relevant shim script depending on the query string
of the login page.

Comment 10

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/5ade2b378473
Add a shim for tsn.ca to address login issue with dFPI. r=anti-tracking-reviewers,webcompat-reviewers,twisniewski,pbz

Comment 11

[Iulian Moraru]

https://hg.mozilla.org/mozilla-central/rev/5ade2b378473

Comment 12

[Monica Chiorean]

Unfortunately QA does not have credentials to log in to this site and signing in requires credit card.
@Simmon can you please help and check if you can log in to tsn.ca using latest Firefox build 116.0 (https://archive.mozilla.org/pub/firefox/candidates/116.0-candidates/build1/win64/), but also make sure that on about:preferences#privacy page the Enhanced Tracking Protection is set to Standard.
Thank you.

Comment 13

[Monica Chiorean]

Simmon Li emailed me and Tim Huang and this is his answer: "I tested with 116 with the settings specified and it worked without issue."
Mark issue as fixed based on his comment.

Comment 14

[Simmon Li [:crespire]]

(In reply to Monica Chiorean from comment #12)

Unfortunately QA does not have credentials to log in to this site and signing in requires credit card.
@Simmon can you please help and check if you can log in to tsn.ca using latest Firefox build 116.0 (https://archive.mozilla.org/pub/firefox/candidates/116.0-candidates/build1/win64/), but also make sure that on about:preferences#privacy page the Enhanced Tracking Protection is set to Standard.
Thank you.

Clearing request flag, thanks again for your work on this!