Mozilla's Discourse instance's Mozilla Account SSO periodically utilises an e-mail address that was, but no longer is, associated with my Mozilla account, preventing login to existing accounts.
Categories
(Websites :: Other, defect)
Tracking
(Not tracked)
People
(Reporter: B.RJL, Unassigned)
References
Details
Attachments
(5 files, 1 obsolete file)
Depiction of the registration form which appears after login.
My Environment
User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/119.0
How To Reproduce
I attempted to authenticate at discourse.mozilla.org/login with an existent account, rather than create a new one.
Actual Result
discourse.mozilla.org/login always uses rokebeedell@gmail.com:
Your email has been authenticated by OpenID Connect
…despite that not being associated with my Mozilla Account whatsoever any more. It was last listed on the account maybe 2 years ago at least. Even //*[@id="new-account-name"] is filled with the old, upper-case version of my name that I long ago utilised.
Because the login process doesn't provide any ability to enter credentials manually, I've had to create almost 5 accounts, because almost every time my authorization expires after creating a new account, the login system reverts to that e-mail address again. I can't bloody escape it.
This means that I am unable to respond on Discourse:
| URI | Triage |
|---|---|
t/135400/4 |
Message-Id: <discourse/post/291695@discourse.mozilla.org> |
I've mostly listed these for myself, so that I don't forget to.
Expected Result
The login system should ideally allow me to choose whether to use Mozilla OAuth or manually enter my credentials.
However, because this is a BR instead of an FR, it should use my account's primary e-mail address and associate the Discourse account itself with my Mozilla Account, rather than rely upon the e-mail addresses correlating, as it currently appears to.
| Comment hidden (obsolete) |
|
Reporter | |
Updated•2 years ago
|
|
|
Reporter | |
Updated•2 years ago
|
|
|
Reporter | |
Comment 2•2 years ago
•
|
||
I have verified at accounts.firefox.com/settings?email=s0rs3i%2Bs0rs3p%40RokeJulianLockhart.AnonAddy.com that rokebeedell@gmail.com is not associated with my account anymore.
|
|
Reporter | |
Comment 3•2 years ago
•
|
||
Accessing this in a private window allows me to disable “auto-login” from there, which then allows me to at least bypass this issue. However, although that form states that this preference is configurable at sso.mozilla.com/dashboard?, it is not, and support.mozilla.org/bm/questions/1190869#answer-1040639 does not allow me to bypass the automatic redirection.
|
|
Reporter | |
Comment 4•2 years ago
|
||
|
|
Reporter | |
Updated•2 years ago
|
|
|
Reporter | |
Updated•1 year ago
|
|
|
Reporter | |
Updated•1 year ago
|
|
|
Reporter | |
Comment 5•1 year ago
•
|
||
The new LDAP login form at auth.mozilla.auth0.com/u/login/password appeared initially useful, since I hoped I'd be able to temporarily set a password for my account so that I wouldn't need to utilise Mozilla SSO.
However, auth.mozilla.auth0.com/u/login/password-reset-start/Mozilla-LDAP/f3pofanb%40rokejulianlockhart.addy.io doesn't send a password reset to my e-mail address, yet you've removed the option to authenticate with an message sent via e-mail, which means that I cannot access my Discourse account via any means anymore.
|
|
Reporter | |
Comment 6•1 year ago
|
||
If I attempt to sign in with Mozilla SSO, the effect is now even worse, since although the /signup form appears for 3s, it, thereafter, is replaced by discourse.mozilla.org/auth/failure?message=csrf_detected&strategy=oidc, which states:
Sorry, the authorization timed out, or you have switched browsers. Please try again.
|
|
Reporter | |
Updated•1 year ago
|
|
|
Reporter | |
Comment 7•8 months ago
•
|
||
I hoped that discourse.mozilla.org/password-reset might allow me to set a password. However, it fails to:
{
"log": {
"version": "1.2",
"creator": {
"name": "Firefox",
"version": "147.0"
},
"browser": {
"name": "Firefox",
"version": "147.0"
},
"pages": [
{
"id": "page_1",
"pageTimings": {
"onContentLoad": -47344,
"onLoad": -47039
},
"startedDateTime": "2026-01-15T00:32:58.297+00:00",
"title": "https://discourse.mozilla.org/categories"
}
],
"entries": [
{
"startedDateTime": "2026-01-15T00:32:58.297+00:00",
"request": {
"bodySize": 43,
"method": "POST",
"url": "https://discourse.mozilla.org/session/forgot_password",
"httpVersion": "HTTP/2",
"headers": [
{
"name": "Host",
"value": "discourse.mozilla.org"
},
{
"name": "User-Agent",
"value": "Mozilla/5.0 (X11; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0"
},
{
"name": "Accept",
"value": "*/*"
},
{
"name": "Accept-Language",
"value": "en-GB,en;q=0.9,en-US;q=0.8"
},
{
"name": "Accept-Encoding",
"value": "gzip, deflate, br, zstd"
},
{
"name": "Referer",
"value": "https://discourse.mozilla.org/categories"
},
{
"name": "X-CSRF-Token",
"value": "8geOcfJTVUmTlB8K4S0S7rpC1-AU7fEenNE0e8tPu5dQKG7N2KvBgweDclvXFwmIpvbzNlQ72Jsm1lj8Bl8-Ow"
},
{
"name": "Content-Type",
"value": "application/x-www-form-urlencoded; charset=UTF-8"
},
{
"name": "Discourse-Present",
"value": "true"
},
{
"name": "X-Requested-With",
"value": "XMLHttpRequest"
},
{
"name": "Content-Length",
"value": "43"
},
{
"name": "Origin",
"value": "https://discourse.mozilla.org"
},
{
"name": "Connection",
"value": "keep-alive"
},
{
"name": "Cookie",
"value": "_ga_2VC139B3XV=GS2.1.s1768434834$o6$g1$t1768435911$j60$l0$h0; _ga=GA1.1.71460331.1765546729; _ga_B9CY1C9VBC=GS2.1.s1767823334$o7$g1$t1767823340$j54$l0$h0; _ga_PWTK27XVWP=GS2.1.s1767971908$o8$g1$t1767972821$j60$l0$h0; _ga_R3H4BDP5J2=GS2.1.s1768317847$o1$g1$t1768319645$j60$l0$h0; _forum_session=ABIpiUCUkp36kXP0qh%2FSEoA9q7jXCyTTRinoqZPfn7L2RjqR6P6PamdBgSyd2io8CSoW01sw78i8E2MWOHX4U4OH%2B1YxNanFZOphKt6TJW0zNw%2BoRbeCsKtAvqC%2B8%2B4Cg0q3XmjlD45jVWzH%2F99IE%2FEMFbTC3SR%2B8R186QWh4g690ksrYxwgpCBU5XhCPyYCuqJYIT7dRX4STsxjoUXv%2Bs9A8afkADOA%2BA2lyk841%2BqoIqspLXwJEjvWWBS9sIID9E584ZRKps1pKRHKswqmjAMjIyY35%2Ftzufj4WEG6UEB4nxSJDomo8xcJZ01lkkUGujdOxEb9aF2%2FpQTZjzoVJoJNFy4cPlRpQqB0iEZzGOkYnLn9zjY%2BjmUI0ljsJM89P8NVOGba6%2FMg0tPkUmgahGlpeWwtvBwEo3wq7pd5JyJJbFM4R469Asdg%2BSCUrcHiGjcRRK%2B%2FgPxNYiVnSpoHNAia1b%2FYI3nt%2BgQ%3D--LRcwdroeiLlx%2FWfG--YoghakEBI0%2FSYb5rurrGKg%3D%3D; _bypass_cache=true"
},
{
"name": "Sec-Fetch-Dest",
"value": "empty"
},
{
"name": "Sec-Fetch-Mode",
"value": "cors"
},
{
"name": "Sec-Fetch-Site",
"value": "same-origin"
},
{
"name": "Pragma",
"value": "no-cache"
},
{
"name": "Cache-Control",
"value": "no-cache"
},
{
"name": "TE",
"value": "trailers"
}
],
"cookies": [
{
"name": "_ga_2VC139B3XV",
"value": "GS2.1.s1768434834$o6$g1$t1768435911$j60$l0$h0"
},
{
"name": "_ga",
"value": "GA1.1.71460331.1765546729"
},
{
"name": "_ga_B9CY1C9VBC",
"value": "GS2.1.s1767823334$o7$g1$t1767823340$j54$l0$h0"
},
{
"name": "_ga_PWTK27XVWP",
"value": "GS2.1.s1767971908$o8$g1$t1767972821$j60$l0$h0"
},
{
"name": "_ga_R3H4BDP5J2",
"value": "GS2.1.s1768317847$o1$g1$t1768319645$j60$l0$h0"
},
{
"name": "_forum_session",
"value": "ABIpiUCUkp36kXP0qh/SEoA9q7jXCyTTRinoqZPfn7L2RjqR6P6PamdBgSyd2io8CSoW01sw78i8E2MWOHX4U4OH+1YxNanFZOphKt6TJW0zNw+oRbeCsKtAvqC+8+4Cg0q3XmjlD45jVWzH/99IE/EMFbTC3SR+8R186QWh4g690ksrYxwgpCBU5XhCPyYCuqJYIT7dRX4STsxjoUXv+s9A8afkADOA+A2lyk841+qoIqspLXwJEjvWWBS9sIID9E584ZRKps1pKRHKswqmjAMjIyY35/tzufj4WEG6UEB4nxSJDomo8xcJZ01lkkUGujdOxEb9aF2/pQTZjzoVJoJNFy4cPlRpQqB0iEZzGOkYnLn9zjY+jmUI0ljsJM89P8NVOGba6/Mg0tPkUmgahGlpeWwtvBwEo3wq7pd5JyJJbFM4R469Asdg+SCUrcHiGjcRRK+/gPxNYiVnSpoHNAia1b/YI3nt+gQ=--LRcwdroeiLlx/WfG--YoghakEBI0/SYb5rurrGKg=="
},
{
"name": "_bypass_cache",
"value": "true"
}
],
"queryString": [],
"headersSize": 1633,
"postData": {
"mimeType": "application/x-www-form-urlencoded",
"params": [
{
"name": "login",
"value": "f3pofanb@rokejulianlockhart.addy.io"
}
],
"text": "login=f3pofanb%40rokejulianlockhart.addy.io"
}
},
"response": {
"status": 403,
"statusText": "",
"httpVersion": "HTTP/2",
"headers": [
{
"name": "server",
"value": "nginx"
},
{
"name": "date",
"value": "Thu, 15 Jan 2026 00:32:58 GMT"
},
{
"name": "content-type",
"value": "application/json; charset=utf-8"
},
{
"name": "content-length",
"value": "98"
},
{
"name": "x-frame-options",
"value": "SAMEORIGIN"
},
{
"name": "x-xss-protection",
"value": "0"
},
{
"name": "x-content-type-options",
"value": "nosniff"
},
{
"name": "x-permitted-cross-domain-policies",
"value": "none"
},
{
"name": "referrer-policy",
"value": "strict-origin-when-cross-origin"
},
{
"name": "x-discourse-route",
"value": "session/forgot_password"
},
{
"name": "vary",
"value": "Accept"
},
{
"name": "cache-control",
"value": "no-cache, no-store"
},
{
"name": "x-request-id",
"value": "7f725f7e-bda8-41c5-8c1c-3555e62995f0"
},
{
"name": "cdck-proxy-id",
"value": "app-router-tieadvanced01.sea1"
},
{
"name": "strict-transport-security",
"value": "max-age=31536000"
},
{
"name": "cdck-proxy-id",
"value": "app-balancer-tieinterceptor1b.sea1"
},
{
"name": "X-Firefox-Spdy",
"value": "h2"
}
],
"cookies": [],
"content": {
"mimeType": "application/json; charset=utf-8",
"size": 98,
"text": "{\"errors\":[\"You are not permitted to view the requested resource.\"],\"error_type\":\"invalid_access\"}"
},
"redirectURL": "",
"headersSize": 600,
"bodySize": 698
},
"cache": {},
"timings": {
"blocked": 0,
"dns": 0,
"connect": 0,
"ssl": 0,
"send": 0,
"wait": 175,
"receive": 0
},
"time": 175,
"_securityState": "secure",
"serverIPAddress": "184.105.99.43",
"connection": "443",
"pageref": "page_1"
}
]
}
}
|
|
Reporter | |
Comment 8•8 months ago
|
||
|
|
Reporter | |
Updated•8 months ago
|
|
|
Reporter | |
Comment 9•7 months ago
•
|
||
In order to interact with content there, I've been forced to register for another account. When I did so, I noticed, at discourse.mozilla.org/u/rokejulianlockhart.t8vqzl/preferences/account#user-content, that the origin of these problems may be “OpenID Connect”:
Associated Accounts
OpenID Connect
rokebeedell@gmail.com
|
|
Reporter | |
Updated•6 months ago
|
|
||
Comment 10•5 months ago
|
||
I think this is a symptom of bug 2022082, so closing this as a duplicate.
|
|
Reporter | |
Updated•3 months ago
|
Description
•