357621 - authentication doesn't work, password recovery doesn't send the email

Status: RESOLVED WORKSFORME

(addons.mozilla.org Graveyard :: Developer Pages, defect)

Description

[Arnaud Abélard]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060913 Fedora/1.5.0.7-1.fc5 Firefox/1.5.0.7 pango-text
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060913 Fedora/1.5.0.7-1.fc5 Firefox/1.5.0.7 pango-text

I haven't been able to log in on addons.mozilla.org today:
- The authentication form says "You were not successfully logged in". 
- My email & password are stored in my firefox keyring so they should be right
- the password recovery page doesn't send any mail but says "Please verify your address is correct."

Reproducible: Always

Steps to Reproduce:
1. go to https://addons.mozilla.org/login.php
2. enter your email address and your password, it will fail
3. go to https://addons.mozilla.org/recoverpassword.php
4. enter your email address, no mail is sent

Actual Results:  
- authentication fails
- password recovery fails

Expected Results:  
- should authenticate
- should send an email with the password recovery instructions.

Comment 1

[Justin Scott [:fligtar]]

Your account email in the developer control panel is arnaud.abelard@remove_this.univ-nantes.fr - is that what you're attempting to login with?

Comment 2

[Justin Scott [:fligtar]]

Seeing as your account has been logged in since this bug was opened, I assume you were using the wrong email address and the one in my comment above was correct. Thanks for letting us know.

Comment 3

[Arnaud Abélard]

(In reply to comment #2)
> Seeing as your account has been logged in since this bug was opened, I assume
> you were using the wrong email address and the one in my comment above was
> correct. Thanks for letting us know.
> 

my bad, i really thought i did reply and closed the bug!
Actually, you were right. For some reason i thought that the displayed email was different from the authentication email.

It would be nice if the authentication email was automatically obfuscated before being displayed or if the page was using a simple javascript to display the email to avoid email harvesters.

Sorry for not having kept this ticket up to date.