1811460 - Account on Microsoft365 returns password is incorrect after update to 102.7.0

Status: RESOLVED DUPLICATE of bug 1810760

(Thunderbird :: Security, defect)

Description

[wfroml]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

String:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0 Thunderbird/102.7.0
After updating to 102.7.0 mail account on outlook.office365.com asks for password, returns "login or password incorrect".
On other computer I didn't update, still on 102.6.1, same password works ok, so definitely problem introduced with 102.7.0
3 other accounts with different providers are OK

Actual results:

Can no longer access new mail on outlook.office365.com

Comment 1

[Thomas D. (:thomas8)]

Yes, there have been issues with this Microsoft setup. Please find more information and possible workarounds from the link below. Fix pending.
This bug is probably a duplicate of bug 1810760.

https://thunderbird.topicbox.com/groups/enterprise/Td36c923e15242454-M429f4bdf1e4d2f4647a25766

Comment 2

[sharpeye-too]

I have found this same issue with 102.7.0 and solved it two days ago with a downgrade. (As background, I am running Thunderbird on the Linux Ubuntu distro Jammy (latest version), and have eliminated Snap altogether from my system. However, I don't think any of that is relevant here, even though I may end up having to walk away from Ubuntu over Ubuntu's apparently relentless commitment to Snap. Further, from others' postings in this thread, it seems that for this issue the particular OS Thunderbird is running on might not be relevant.)

After reviewing the versions of Thunderbird available to me with the terminal command "apt list -a thunderbird", the solution in my case was to downgrade Thunderbird to version 102.4.2. Per the list of versions, this was downgrading "by a single notch".

It turned out to be necessary to lock the version 102.4.2 because it otherwise upgraded itself to 102.7.0 and the problem reappeared the next day.

At first I thought it was something with Godaddy/Outlook/Office365 servers, but the Thunderbird downgrade fixed it. In my case the issue was limited to a single Godaddy/Outlook/Office365 email account which now required OAuth2 security. With hindsight I also think a factor in the issue was that I had not opened Thunderbird on that machine over the last few weeks, and so I needed to implement the OAuth2 authentication for the first time on that particular account. Other email accounts already using OAuth2 authentication before those last few weeks, such as with Yahoo and Google, were not affected.

I think I can correctly encapsulate the issue with 102.7.0 - at least with the Linux version - in this way: in situations where the appearance of an additional dialog window is needed which asks for confirmation that the "behind-the-scenes generated" OAuth2 password be saved, that additional window does not appear. After that one is in a circular limbo with passwords being declared incorrect.

Running Thunderbird with a new profile in troubleshooting mode with the terminal window open while trying to add just the one troublesome email account, is what revealed the existence of an error and gave a clue to its nature and made me think of the downgrade idea.

Comment 3

[wfroml]

Update 102.7.1 has solved the problem