881856 - Logging into Persona on MofoStaging has no effect

Status: RESOLVED FIXED

(Webmaker Graveyard :: Login, defect)

Description

[Dale Karp (:daleee)]

Console dump:
Failed to load resource: the server responded with a status of 404 (Not Found) https://webmaker.mofostaging.net/user/[e-mail]
Failed to load resource: the server responded with a status of 404 (Not Found) https://login.mofostaging.net/ajax/forms/new_user.html
Failed to load resource: Request header field X-CSRF-Token is not allowed by Access-Control-Allow-Headers. https://login.mofostaging.net/ajax/forms/new_user.html
XMLHttpRequest cannot load https://login.mofostaging.net/ajax/forms/new_user.html. Request header field X-CSRF-Token is not allowed by Access-Control-Allow-Headers. webmaker.mofostaging.net/:1

Comment 1

[David Humphrey (:humph)]

Cade is going to drive this.

Comment 2

[Dale Karp (:daleee)]

STR:

1) Go to https://webmaker.mofostaging.net/
2) Open dev console (I use Chrome)
3) Click 'Sign in'
4) Sign into Persona
5) Nothing happens, you should see the error in the log.

Comment 3

[Chris DeCairos (:cade)]

I tried this using Firefox 22 and Chrome 27 - both in private browsing mode. I cannot reproduce the bug.

Dis you change anything about your persona account? email perhaps?

Comment 4

[Dale Karp (:daleee)]

This is a new user which has no Webmaker identity attached to their Persona login!

Comment 5

[Chris DeCairos (:cade)]

Attachment: https://github.com/mozilla/login.webmaker.org/pull/97

login simply needed to allow the csrf token header that webmaker.org sends with its requests now

Comment 6

[Kieran Sedgwick (:sedge)]

Comment on attachment 761446 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/97

Comments in the pr

Comment 7

[Chris DeCairos (:cade)]

Comment on attachment 761446 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/97

updated

Comment 8

[Kieran Sedgwick (:sedge)]

Comment on attachment 761446 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/97

Lookin' good!

Comment 9

[Kieran Sedgwick (:sedge)]

Comment on attachment 761446 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/97

Following up on some points :cade raised.

Comment 10

[[github robot]]

Commit pushed to master at https://github.com/mozilla/login.webmaker.org

https://github.com/mozilla/login.webmaker.org/commit/a829ab9f6975f387b3ce8eac39aa1f8d0f0c94ff
Fix Bug 881856 - Remove universal csrf headers in sso-ux, and use on case by case basis. Create Options paths.