700330 - sometimes i'm prompted to authenticate when i'm already logged in

Status: VERIFIED FIXED

(Participation Infrastructure :: Phonebook, defect)

Description

[:glob ✱]

when i'm already logged in to mozillians, sometimes when i click on a link to a profile i'm prompted to login.

it looks like this happens when my login cookie is bound to http://mozillians.org/ and i open a url which is http://www.mozillains.org/ (note the www.)

login cookies should be shared across all aliases for the site, or users should be redirected to the same host (eg.  redirect www.mozillains.org requests to mozillians.org).

Comment 1

[Aakash Desai [:aakashd]]

This may be an IT thang. Cc'ing 'em.

Comment 2

[Corey Shields [:cshields]]

I had this happen to me today as well..

thought it was session persistence but that is already enabled for this cluster..  so hrmmm

aakash, how are sessions handled in mozillians?

Comment 3

[tofumatt [:tofumatt]]

Byron: you're correct, the sessions on mozillians.org don't carry over to www. I suppose we should have keyed our cookies to work under this scenario.

That said, I'd rather www simply redirect to mozillians.org. I'm not sure if other apps do, but I don't see why we should do anything other than redirect www.mozilla.org/(.*) to mozilla.org/\1.

Corey, is that doable and not annoying? I'm not trying to weasel my way out of work ere -- I just don't like "www." :-)

Comment 4

[tofumatt [:tofumatt]]

I just noticed that mozilla.org does redirects (though, the opposite way  -- TO www. from mozilla.org), so obviously this is kosher.

Bug 700894 filed, which will fix this puppy.

Comment 5

[Matt Brandt [:mbrandt]]

QA verified on production --> https://bugzilla.mozilla.org/show_bug.cgi?id=700894#c2 checks out.