491940 - authenticator doesn't work on Mozillazine forums

Status: RESOLVED FIXED

(Mozilla Labs :: Identity, defect)

Description

[Myk Melez [:myk] [@mykmelez]]

When I go to http://forums.mozillazine.org/, select my username from the menu in the auth panel, and then press the Sign In button, Mozillazine loads http://forums.mozillazine.org/ucp.php?mode=login, which shows me as not being logged in.

But if I press the Login button in the page instead, Mozillazine reloads the original page, which shows me as being logged in.

Comment 1

[Anant Narayanan [:anant]]

Further investigation reveals that calling <form-element>.submit() from JS does not behave exactly the same as a user clicking the submit button. Here is the POST request generated calling form.submit():

8:29:28.100[101ms][total 338ms] Status: 200[OK]
POST http://forums.mozillazine.org/ucp.php?mode=login Load Flags[LOAD_DOCUMENT_URI  LOAD_INITIAL_DOCUMENT_URI  ] Content Size[-1] Mime Type[text/html]
   Request Headers:
      Host[forums.mozillazine.org]
      User-Agent[Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en-us,en;q=0.5]
      Accept-Encoding[gzip,deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Keep-Alive[300]
      Connection[keep-alive]
   Post Data:
      username[anant]
      password[*****]
   Response Headers:
      Date[Mon, 06 Jul 2009 15:29:28 GMT]
      Server[Apache]
      X-Powered-By[PHP/5.2.8-pl2-gentoo]
      Cache-Control[private, no-cache="set-cookie"]
      Expires[0]
      Pragma[no-cache]
      Content-Type[text/html; charset=UTF-8]
      X-Cache[MISS from www1.mozillazine.org]
      X-Cache-Lookup[MISS from www1.mozillazine.org:80]
      Via[1.1 www1.mozillazine.org:80 (squid/2.7.STABLE6)]
      Connection[close]

while the POST request generated by a manual click:

8:32:25.086[126ms][total 126ms] Status: 200[OK]
POST http://forums.mozillazine.org/ucp.php?mode=login Load Flags[LOAD_DOCUMENT_URI  LOAD_INITIAL_DOCUMENT_URI  ] Content Size[-1] Mime Type[text/html]
   Request Headers:
      Host[forums.mozillazine.org]
      User-Agent[Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en-us,en;q=0.5]
      Accept-Encoding[gzip,deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Keep-Alive[300]
      Connection[keep-alive]
   Post Data:
      username[anant]
      password[*****]
      redirect[index.php]
      sid[bdaa476629ebdd1dc41731089ced2549]
      login[Login]
   Response Headers:
      Date[Mon, 06 Jul 2009 15:32:25 GMT]
      Server[Apache]
      X-Powered-By[PHP/5.2.8-pl2-gentoo]
      Cache-Control[private, no-cache="set-cookie"]
      Expires[0]
      Pragma[no-cache]
      Content-Type[text/html; charset=UTF-8]
      X-Cache[MISS from www2.mozillazine.org]
      X-Cache-Lookup[MISS from www2.mozillazine.org:80]
      Via[1.1 www2.mozillazine.org:80 (squid/2.7.STABLE6)]
      Connection[close]

Note the extra POST parameters 'sid' and 'login'.

Comment 2

[Anant Narayanan [:anant]]

Fixed http://hg.mozilla.org/labs/weave/rev/960a8df37031