693964 - AMO login invalid after resetting the password - but works with old password

Status: VERIFIED WORKSFORME

(addons.mozilla.org :: Security, defect)

Description

[Ioan C.]

Attachment: screenshot after hitting LOGIN.

Steps to reproduce:
1. Using an existing AMO account, try to login. First time, I got the "Oops..." message and again the Login form. Second time, typing in the email and password doesn't do anything (just reloads the login page) and doesn't display any error messages (see attached screenshot).
2. Reset the password: type email, get message confirmation with password reset, click on link, type twice the new password and check if you receive "Password successfully reset" message.
3. Go to Login page again and submit email and new password.

Actual Result:
- Invalid login - "Please enter a correct username and password. Note that both fields are case-sensitive." and Capcha is displayed, so the new password is not working. After a few more attempts, I have tried with the OLD password and it was working.

Expected Result:
- User should be able to authenticate after resetting the password.

Comment 1

[Wil Clouser [:clouserw]]

Are you blocking cookies or running any filtering software?  Do you have any add-ons installed?  This is not normal behavior.

CCing QA to reproduce

Comment 2

[krupa raj[:krupa]]

(In reply to Wil Clouser [:clouserw] from comment #1)
> Are you blocking cookies or running any filtering software?  Do you have any
> add-ons installed?  This is not normal behavior.
> 
> CCing QA to reproduce

Ioan is one of our new contractors. I have heard similar complaints from other contractors too. However, I cannot reproduce this behavior (I tried in different profiles).

Ioan, can you reproduce this issue with a different account?

Comment 3

[Ioan C.]

Not reproducible on subsequent attempts (FF 7.0.1 @ Win XP, Mac OS X). Apparently, this was happening only on that specific day (2011-10-12 04:30:12 PDT) during 2-3 hours interval. I have tried with another test account and it didn't behave like that. Then, got back to the first account and it logged in successfully (with the old password). 

Krupa, if you remember, we asked if there is something going on with the Staging server since everyone experienced strange behavior from AMO that day: some got blank pages, some weren't able to login since they needed to resend the confirmation email request again.

Comment 4

[Ioan C.]

There was no blocking of cookies, and no other filtering software aside from AVG.

Comment 5

[Wil Clouser [:clouserw]]

wfm based on comment 3

Comment 6

[madhubala4998]

Attachment: Screenshot (1).png

scurity