833678 - CSRF failure doing app purchase

Status: RESOLVED DUPLICATE of bug 864663

(Marketplace Graveyard :: Consumer Pages, defect, P2)

Description

[krupa raj[:krupa]]

Attachment: screenshot

steps to reproduce:
0. Tester is logged into marketplace-dev 5 hours earlier
1. Click on the purchase button for 'private yacht'

reproducible? sometimes

expected behavior:
- CSRF failures are dealt with gracefully.
- If the user session has expired, we make them log in again after clicking purchase.

observed behavior:
CSRF failure showing an ugly 403 error to the user. See screenshot.

Comment 1

[Kumar McMillan [:kumar]]

I've seen this too. This might be related to memcache going away temporarily.

Comment 2

[Wil Clouser [:clouserw]]

(In reply to Kumar McMillan [:kumar] from comment #1)
> I've seen this too. This might be related to memcache going away temporarily.

you mean something on -dev or does memcache go away other times?

Comment 3

[Kumar McMillan [:kumar]]

I've only seen it on dev so I'm not sure. It's worth a try to turn off memcache (to simulate an outage) to see how much of the payment flow still works.

Comment 4

[Kumar McMillan [:kumar]]

I rarely see this, marking as P3. Seems like something we should address though.

Comment 5

[krupa raj[:krupa]]

I have seen this twice in the last week. So, moving it to P2.

Comment 6

[Kumar McMillan [:kumar]]

pretty sure this is the same as bug 864663