1905658 - Repeated error 400 on admin.google.com and other Google properties

Status: RESOLVED INVALID

(Firefox :: Untriaged, defect)

Description

[Teal Bauer [:teal]]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0

Steps to reproduce:

I am logged in to a Google Workspace account in a Container Tab in Firefox. I want to change settings in the workspace, so I open https://admin.google.com/.

Actual results:

More often than not, but not quite always, when I go to https://admin.google.com/, I will be told after a few redirects that "The server cannot process the request because it is malformed. It should not be retried. That’s all we know." (HTTP Error 400)

Clearing cookies or using a private window works, but forces me to re-authenticate, which for some accounts with heightened security settings can be quite annoying.

I tried allowlisting all of google.com in uBlock Origin and tried disabling the Enhanced Tracking Protection, neither of which made a difference. Nothing seems obviously wrong with the request, nor are they particularly big (example request headers have 3.925 kB per Network tab). The request is sending several cookies that contain auth info across google properties, but none of the cookies is very long either, and they don't seem obviously corrupted.

Expected results:

The Google Workspace Admin Console should load.

Comment 1

[Teal Bauer [:teal]]

Some more notes:

• This happens in different container tab profiles
• This happens for different Google Workspace accounts
• It happens on both Windows and macOS (Firefox Dev Edition for both, same Firefox Sync account)

I'm not sure how to debug this further and would appreciate any pointers.

Comment 2

[BugBot [:suhaib / :marco]]

The Bugbug bot thinks this bug should belong to the 'Core::Privacy: Anti-Tracking' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 3

[Emma Zühlcke [:emz]]

Not ETP related at first glance since it also reproduces with ETP off. Moving to webcompat.

Comment 4

[Teal Bauer [:teal]]

As so often, in the process of describing the issue for a bug report, I figured it out. The "Neat URLs" extension would break Google's GAIA authentication dance by stripping some parameters. Disabling the extension fixed the issue. I will report this to the extension developer instead.

Comment 5

[Emma Zühlcke [:emz]]

Reporter, could you test this with a new profile? You can switch between profiles and create a new one via about:profiles.

Comment 6

[Teal Bauer [:teal]]

As so often, in the process of describing the issue for a bug report, I figured it out. The "Neat URLs" extension would break Google's GAIA authentication dance by stripping some parameters. Disabling the extension fixed the issue. I will report this to the extension developer instead.

Comment 7

[Emma Zühlcke [:emz]]

Thanks!