Closed Bug 908342 Opened 12 years ago Closed 11 years ago

Signing in with a mixed-case email address causes perpetual refresh bug

Categories

(Participation Infrastructure :: Phonebook, defect)

Product:
Participation Infrastructure
Component:
Phonebook
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: yrchen, Unassigned)

References

Details

(Whiteboard: [kb=1111473] )

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/536.30.1 (KHTML, like Gecko) Version/6.0.5 Safari/536.30.1 Steps to reproduce: When I sign-in with Persona on Mozilians.org, the site keeps redirecting to the same page repeatedly. I have tried many different OS and browsers, all same results. * OSX 10.8.4 + Firefox 23 * OSX 10.8.4 + Chrome 29 * OSX 10.8.4 + Safari 6.0.5 * Windows 8 + Firefox 23 * Windows 8 + Chrome 29 My profile on Mozillians.org is https://mozillians.org/en-US/u/yrchen/
Xaver, what page does the site keep redirecting you to? Is it inside the persona signin window, or is it on Mozillians.org? Is there any message? It might help to post a video showing what you're seeing. Jing (http://www.techsmith.com/download/jing/) is one tool to do it.
(In reply to Justin Crawford [:hoosteeno] from comment #1) > Xaver, what page does the site keep redirecting you to? Is it inside the > persona signin window, or is it on Mozillians.org? Is there any message? > > It might help to post a video showing what you're seeing. Jing > (http://www.techsmith.com/download/jing/) is one tool to do it. Hi, It's on Mozillians.org. Please check the following video. http://screencast.com/t/ufy7ZNjv Thanks.
Thanks for the video, I'm not sure I ever would have imagined this behavior. That is /very/ unusual. Can you try a couple things and let me know the outcome? 1) get rid of all mozillians.org and persona.org cookies and try again on mozilla.org with the same account? 2) try creating an account on staging (mozillians.allizom.org) and see if the behavior is the same? 3) try creating another account on mozillians with a different email address and see if the behavior is the same? (I can vouch for this account or delete it when we're done) Also, if you have the web console open, you might see something happening that might help debug this. So far, you're the only one experiencing it. Thanks!
(In reply to Justin Crawford [:hoosteeno] from comment #3) > Thanks for the video, I'm not sure I ever would have imagined this behavior. > That is /very/ unusual. > > Can you try a couple things and let me know the outcome? > > 1) get rid of all mozillians.org and persona.org cookies and try again on > mozilla.org with the same account? > 2) try creating an account on staging (mozillians.allizom.org) and see if > the behavior is the same? > 3) try creating another account on mozillians with a different email address > and see if the behavior is the same? (I can vouch for this account or delete > it when we're done) > > Also, if you have the web console open, you might see something happening > that might help debug this. So far, you're the only one experiencing it. > > Thanks! Hi, 1) I tried many times in different browsers (Chrome, Firefox and Safari) and machines (OSX & Windows 8). It doesn't works. 2) Please check the video, same behavior on staging site. http://screencast.com/t/TzeYKsWg 3) The problem been resolved when I use different email address! http://screencast.com/t/K84ISuGzxA Thank you for your kind support.
This is a Mozillians.org bug. You can replicate it by signing in to prod or stage with an email address that contains capital letters in the domain (ex: some_email@MAILINATOR.com). Lloyd from #identity suggests that there is probably some "assymetric email case normalization" going on -- i.e. we're getting a mixed-case email from Persona and we're not handling it quite right.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Summary: Mozillans.org - Site keeps redirecting to the same page repeatedly after sign in with Persona → Signing in with a mixed-case email address causes perpetual refresh bug
Whiteboard: [kb=1111473]
OK We know that's wrong! The email in the database for Xaver is in all lowercase while he's logging in with a mixed case email. Then we end up in a situation that Django logs you in, but Persona believes that you're still not logged in (because the case of the email sent, doesn't match the case of the email on the server). Persona then tries to log you on again and again and again. Probably Xaver created his account before we enable persona, or he changed his account to mixed case on persona.org after he originally created his mozillians.org account. This bug needs some discussion on what's appropriate to do, because technically FOO@bar.com is different to foo@bar.com and we can't ignore case in emails, at least not before the '@' symbol, but persona.org seems to ignore it. For the time being I changed Xaver email to match the case he's using on persona.org and that should fix it. Xavier can you please verify that you can log in and pages don't get refreshed?
Flags: needinfo?(yrchen)
(In reply to Giorgos Logiotatidis [:giorgos] from comment #6) > OK We know that's wrong! The email in the database for Xaver is in all > lowercase while he's logging in with a mixed case email. Then we end up in a > situation that Django logs you in, but Persona believes that you're still > not logged in (because the case of the email sent, doesn't match the case of > the email on the server). Persona then tries to log you on again and again > and again. > > Probably Xaver created his account before we enable persona, or he changed > his account to mixed case on persona.org after he originally created his > mozillians.org account. > > This bug needs some discussion on what's appropriate to do, because > technically FOO@bar.com is different to foo@bar.com and we can't ignore case > in emails, at least not before the '@' symbol, but persona.org seems to > ignore it. > > For the time being I changed Xaver email to match the case he's using on > persona.org and that should fix it. > > Xavier can you please verify that you can log in and pages don't get > refreshed? It works now! I can log in mozillians.org and all pages don't get refreshed! Thank you for helping me.
Flags: needinfo?(yrchen)
(In reply to Giorgos Logiotatidis [:giorgos] from comment #6) > This bug needs some discussion on what's appropriate to do, because > technically FOO@bar.com is different to foo@bar.com and we can't ignore case > in emails, at least not before the '@' symbol, but persona.org seems to > ignore it. What do you recommend doing (if anything)? This feels like it impacts a small number of people, but it's hard to know.
Flags: needinfo?(giorgos)
Could we at least detect the case, and give user some hints why the page is reloading all the time.
I believe that this will be fixed on the Persona level (comment 8) so hopefully we don't have to do anything but wait. If meanwhile somebody complains about it, we know that the fix is to have it's email address in our database, in the exact same case it's used in Persona.
Flags: needinfo?(giorgos)
Sounds good. Thanks Giorgos!
I experienced the same bug yesterday. My email address on mozillians.org was flore@ whereas my address on persona was Flore@ I solved my issue by changing my address on persona.org to flore@ and the permanent refresh stopped... Something weird, is that I don't have this issue on bugzilla. My bugzilla mail is Flore@ and the persona is flore@ but no problem so far (no refresh every second) and of course I always log in with persona. So it seems it's not the same piece of code in bugzilla and mozillians that compares the email addresses between the site and persona.
(In reply to Giorgos Logiotatidis [:giorgos] from comment #6) > For the time being I changed Xaver email to match the case he's using on > persona.org and that should fix it. Giorgos, would you be able to do the same for me?
Flags: needinfo?(giorgos)
This morning I have verified both workarounds for this issue: 1) A mozillians administrator can change the email address on record to the mixed-case version 2) The user can go to https://login.persona.org/ and delete the mixed-case email address, then add an all-lowercase email when logging in. It is important to note that not all "can't login" bugs are related to this; there are also various outstanding Persona issues related to 3rd-party cookies, iOS7 Safari, and probably more. But if you have a mixed-case email address, that is probably the reason you can't login to Mozillians.org If you would like a mozillians administrator to change your email address, please file a new bug. If you're in a rush, please delete your mixed-case address from persona and add an all-lowercase address instead.
(In reply to :Ms2ger from comment #15) > (In reply to Giorgos Logiotatidis [:giorgos] from comment #6) > > For the time being I changed Xaver email to match the case he's using on > > persona.org and that should fix it. > > Giorgos, would you be able to do the same for me? Sure but I don't know which is the persona email you're using.
Flags: needinfo?(giorgos)
I come back to this bug, because I have now the same problem on reps.mozilla.org. I never had this problem before on remo. And now, the perpetual refresh, I can't create events, budget or swag requests or file my monthly report. What happened on remo or browser ID that messes up on yet another website? Last week I had to delete my webmaker profile and create another with the persona address (the only difference being a f or a F). I encounter the same issue on openbadges.org... Moreover, on remo or webmaker, I can't change my email address by myself (in addition to the fact that the page refreshes every second). If I try to register the Flore@ address on persona in addition to the flore@, it's denied because they are the same address (of course). This is a serious issue and something has to be done for this. When persona will be used on sites other than mozilla, used by a non technical audience (which is already the case with webmaker.org), it will be a problem. I know a lot of people who don't care how they write their email addresses: capital or not, uppercase, or mixed...
Flore I'm sorry you're having this problem. I totally agree with you that should be fixed asap. This is a persona / browserid issue though and it's tracked here: https://github.com/mozilla/browserid/issues/3878 I just commented on this to bring it up again. Meanwhile what I can do for you is change your email address to mozillians or the reps portal to match exactly the casing you use on Persona. If you want this, please email me with your Persona as is and I'll do what's needed. Thanks
I too face similar problem. I am not able to login at reps.mozilla.org and mozillians.org/en-US/ When I login with persona it automatically logouts within 2 seconds.. What Giorgos Logiotatidis works correctly.
Me too have same problem. but my mozillians account has problem in some times only ,but https://reps.mozilla.org/ is not working..
Depends on: 1000908
Upgrade to django-browserid v0.10 (bug 1000908) should have fixed that. I cannot reproduce it anymore. Do you still experience the same behavior?
Flags: needinfo?(yrchen)
(In reply to Giorgos Logiotatidis [:giorgos] from comment #23) > Upgrade to django-browserid v0.10 (bug 1000908) should have fixed that. I > cannot reproduce it anymore. > > Do you still experience the same behavior? It's OK now. Thanks for your kindly help :)
Flags: needinfo?(yrchen)
Great! Thanks for checking Xaver. Marking fixed per comment 24.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
bumping to verified per comment 25
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.