1819658 - 401 UNAUTHORIZED with SharePoint Online

Status: RESOLVED INCOMPLETE

(Core :: DOM: Service Workers, defect)

Description

[alexis.decarvalho]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0

Steps to reproduce:

When I go to a SharePoint Online and disconnect from that SharePoint Online, I can't reconnect to it.

Actual results:

I get the error 401 UNAUTHORIZED. I have to delete in "Settings" the "Offline Website Data". After that it works again. However, I will not do this every time to reconnect.

Expected results:

Just like Chrome and Edge Chromium, I should be able to log in again without getting this error.

Comment 1

[:Gijs (he/him)]

Not a security exploit in Firefox that needs to remain hidden.

Comment 2

[Mike Kaply [:mkaply]]

Are you using the Microsoft Cloud version of Sharepoint or a on premise version?

Are you using our Windows SSO feature?

Comment 3

[alexis.decarvalho]

This is a Microsoft Cloud version. On an on premise version, I don't have the problem.

We use Windows SSO

Comment 4

[Mike Kaply [:mkaply]]

If we could get some logs, we can have Microsoft take a look.

Can you take a look at:

https://bugzilla.mozilla.org/show_bug.cgi?id=1810571#c8

And follow the instructions there?

Comment 5

[alexis.decarvalho]

I can do it, yes. Where should I send the data? Is the sending secure and private? Who will be able to see the data?

Comment 6

[Mike Kaply [:mkaply]]

(In reply to alexis.decarvalho from comment #5)

I can do it, yes. Where should I send the data? Is the sending secure and private? Who will be able to see the data?

You can make it available to me - mkaply at mozilla.com. The only people that will be looking at it is Microsoft.

Comment 7

[alexis.decarvalho]

It seems that if you set the parameter "dom.serviceworkers.enabled" in about:config to "False", you don't have the problem anymore.

Do you think it is normal to have to disable this parameter? Is there any security or operational risk in disabling this parameter?

Comment 8

[Mike Kaply [:mkaply]]

You definitely should not need to disable that parameter and yes, it could cause things on the web to break.

Comment 9

[Simona Badau, Desktop QA]

This issue is still untriaged - moving it to Core > DOM: Service Workers, so that our engineers could take a look at it. If this is not the right component, please assign a more appropriate one. Thanks!

Comment 10

[Mike Kaply [:mkaply]]

Microsoft said they aren't aware of any issues. I'm at loss.

Comment 11

[Mike Kaply [:mkaply]]

I just tried with my test Office365 account and I'm not having any issues getting to sharepoint.

Does it happen without Windows SSO?

Can you provide the URL you are navigating to?

Comment 12

[BugBot [:suhaib / :marco/ :calixte]]

A needinfo is requested from the reporter, however, the reporter is inactive on Bugzilla. Closing the bug as incomplete.

For more information, please visit BugBot documentation.