1967922 - Akamai blocks account.lenovo.com log-in

Status: NEW

(Web Compatibility :: Site Reports, defect, P2)

Description

[Emilio Cobos Álvarez [:emilio]]

Login XHR fails with a 403. Some other pages give an html response:

Access Denied
You don't have permission to access "http://account.lenovo.com/es/es/account/login/index.html?" on this server.

Reference #18.53d73b17.1747904411.1e300060

https://errors.edgesuite.net/18.53d73b17.1747904411.1e300060

So I think this is Akamai :(

Comment 1

[Emilio Cobos Álvarez [:emilio]]

Annoyingly even Linux Release is affected, but Chrome works... :(

Comment 2

[Emilio Cobos Álvarez [:emilio]]

Also affects macOS Nightly and release.

STR for that error is just going to https://account.lenovo.com/es/es/account/login/index.html?returnUrl=https://account.lenovo.com/es/es/account/login/index.html?returnUrl=https://account.lenovo.com/es/es/account/login/index.html

But actually I think there's another error. If strip out the query string the login seems to work, but it just hangs with a CORS error:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://openapi.lenovo.com/es/es/v3/userLogin. (Reason: CORS request did not succeed). Status code: (null).

Comment 3

[Emilio Cobos Álvarez [:emilio]]

Ok I think it's still akamai tho. If the response succeeds, there are CORS headers. If they get blocked by akamai, they don't include them and the CORS check fails.