New issue
Advanced search Search tips

Issue 733480 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug



Sign in to add a comment

chrome.identity.launchWebAuthFlow has occasional problem with two-step authentication

Reported by wa...@bart.com.hk, Jun 15 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36

Steps to reproduce the problem:
1. install an extension that used launchWebAuthflow (e.g. https://chrome.google.com/webstore/detail/simple-gmail-notes/jfjkcbkgjohminidbpendlodpfacgmlm/support?hl=en)
2. login into a gmail account
3. enable the two-step authentication for the gmail account
4. click log-in of the extension
5. login screen of OAuth2 should appear, that allows use of extension

What is the expected behavior?
1. user click agree on the mobile device
2. user get logged into the extension

What went wrong?
The window automatically closed after clicked the extension login link. The error message returned to launchWebAuthFlow is "Authorization page could not be loaded."

Did this work before? N/A 

Does this work in other browsers? N/A

Chrome version: 58.0.3029.110  Channel: stable
OS Version: 10.0
Flash Version: 

The extension worked fine for most of time, and (I believe) the two-step authentication also worked fine in most cases, as I tried that quite a few times myself.

But the problem was reported quite a number of times from the extension reporting page (https://chrome.google.com/webstore/detail/simple-gmail-notes/jfjkcbkgjohminidbpendlodpfacgmlm/support?hl=en). And I finally reproduced the problem last night in my MacBook. I tried to login 5 times, the first 3 times failed with error "Authorization page could not be loaded". But the last 2 times worked fine, without any change in code.

From what I see in the debugging tool, one thing I noticed is, when the browser hanged in the 3rd time, the OAuth window actually tried to be redirected to 'accounts.youtube.com', which then triggered something that closed the OAuth2 window. But the redirection seems not happened in the last 2 times. I am not sure if that's related, however.

Thanks.
 

Comment 1 by tapted@chromium.org, Jun 16 2017

Components: Platform>Extensions>API
Labels: Needs-Milestone

Comment 3 by ajha@chromium.org, Jun 28 2017

Cc: ajha@chromium.org
Labels: Needs-Feedback
Tried to reproduce the issue as per the test steps mentioned in C#0 on the latest stable(59.0.3071.115) Mac OS 10.12.5. Somehow, I am not seeing login of extension as mentioned in step #4. Attached is the screen-cast of the same.

 walty@: Could you please review the attached screen-cast and confirm if anything being  missed here.

Thanks in advance! 
733480.webm
7.4 MB View Download

Comment 4 by wa...@bart.com.hk, Jun 28 2017

hi,

to login the extension, you need to open any email inside gmail, then at the top of email page there is a text area, and above the text area there is a login link.

click the login link will allow you to log into the extension.

thanks.
Project Member

Comment 5 by sheriffbot@chromium.org, Jun 28 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "ajha@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: Needs-Feedback
Tested this issue using latest Stable #59.0.3071.115 and reported version on Mac 10.12.5 and was unable to reproduce the issue as per the steps mentioned below.

1. Installed the extension from WebStore(https://chrome.google.com/webstore/detail/simple-gmail-notes/jfjkcbkgjohminidbpendlodpfacgmlm/support?hl=en))
2. Signed into Gmail.
3. Opened an Email and logged into simple Gmail notes app.

@walty: Please find the attached screen cast and let us know your observations.

Thanks!!
Jun 29 2017 12-33 PM.webm
6.7 MB View Download
Status: WontFix (was: Unconfirmed)
Mac triage: closing old issue without feedback.

Sign in to add a comment