715027 - [prod] [stage] Affiliates: Logging in via BrowserID sporadically fails with a 403

Status: VERIFIED WONTFIX

(Firefox Affiliates Graveyard :: affiliates.mozilla.org, defect)

Description

[Matt Brandt [:mbrandt]]

Attachment: qa - screenshot 403 message

Logging into Affiliates using BrowserID sporadically fails with a 403 response code. This appears to be browser and OS agnostic (OSX (FF9, FF10, Chrome, Safari), Ubuntu 11.10 (FF8, FF10)).

Steps to reproduce:
1. goto affiliates.mozilla.org/en-US/
2. login with a pre-existing account

Actual:
Login sporadically fails with a 403 response and error message "BrowserID could not verify your identity. Visit browserid.org for more information."

Comment 1

[James Bonacci [:jbonacci]]

+ me for tracking.
Will note this for the current and near term trains going through BrowserID testing.

Comment 2

[Osmose [:osmose, :mkelly]]

We should've been getting error emails while this was happening. mbrandt, can you share the IP address of the machine you used to test this?

jason: Can we use that IP to check the Affiliates request logs?

Comment 3

[Matt Brandt [:mbrandt]]

I believe it was 69.181.250.185.

Comment 4

[Jason Thomas [:jason]]

I checked the affiliates prod httpd access logs on all our nodes and there were around 300 occurrences. http://jason.pastebin.mozilla.org/1436903

I checked for corresponding messages in the error log but did not see anything.

Comment 5

[Osmose [:osmose, :mkelly]]

Attachment: Chart of 403s per second over lifetime of Affiliates

Here's a chart of the rate of 403s per second for the site since this bug was filed. Given this low rate and given that we haven't seen more of this during testing since this file was bug makes me think that it might be handled. 

However, I'd like to make sure we have regularly running automation that tests the login process. mbrant, can you confirm this, and if we do, resolve this as WONTFIX (or FIXED, not sure which applies since no specific fix was made).

Comment 6

[Matt Brandt [:mbrandt]]

Fair enough (comment 5) - Bumping to WONTFIX

We do indeed have tests that hit the log in workflow and they are green like Kermit the Frog:

- https://github.com/mozilla/Affiliates-Tests/blob/master/tests/test_home_page.py
- http://qa-selenium.mv.mozilla.com:8080/view/Affiliates/job/affiliates.prod/

Comment 7

[Matt Brandt [:mbrandt]]

Bumping to verified -- this hasn't been a problem for ages.