Direct login is observed on makemytrip.com .
Reported by
shruti.j...@etouch.net,
Mar 29 2018
|
|||||||||||
Issue descriptionChrome Version: 67.0.3383.0 Revision b6c093c42e2a0eb8c2d8c9dc76171b59dc65568d-refs/heads/master@{#546671}(32/64 bit) OS: Windows(7,8,8.1,10), Mac(10.12.6,10.13.1,10.13.4),Linux(14.04 LTS) What steps will reproduce the problem? 1.Launch chrome, and navigate to www.makemytrip.com/. 2.Click on Login and select google then login with valid credentials. 3.Log out and again click on Login and observe. Actual:Second time Login happens with previously saved credentials without asking for any other gmail account. Expected: In firefox while second time login after logout it asks for other gmail accounts ,No direct login is seen rather ask for other gmail accounts permission. This is a non-regression issue, seen from M60 build #60.0.3072.0 Note:Issue is not seen on Firefox. Kindly Refer the attached video for your reference. Thank You!
,
Mar 30 2018
,
Apr 18 2018
Sorry for the delayed response! Could you please provide a chrome://net-export log of this happening? Instructions: https://dev.chromium.org/for-testers/providing-network-details
,
Apr 19 2018
This sounds like it might be the same as issue 831044 , which is also with a Google account. Are you signed into Chrome? Attaching the signin label, as this seems like there may be some Google-specific magic in these two issues.
,
Apr 20 2018
,
Apr 25 2018
shruti.jadhav: Could you response to comment #5? Thanks!
,
Apr 26 2018
With respect to comment#5: I am not signed in to chrome. Thank You!
,
Apr 27 2018
I'm not sure that the issue is actually in Chrome, because it looks like the sign-in page just automatically picks an account to sign-in with. Mihai, can you please assign this to the proper team?
,
Apr 27 2018
I can reproduce this issue in a Guest Profile, so this is not a Chrome sign-in issue, but rather a Google web sign-in issue. We can follow-up internally with an engineer that work on the Google auth team. Just a couple of remarks: 1. When you log in to with Google to www.makemytrip.com, you basically do 2 things: you log in to Google web and at the same time you authorize www.makemytrip.com to get see some information about your Google account (this is the authorization dialog in the log-in flow). Internally this uses the OAuth 2.0 protocol and generates an access token that allows www.makemytrip.com to the account info you authorized previously. This access token has a limited lifetime. 2. When you hit Logout from www.makemytrip.com, you are only logging out from www.makemytrip.com. www.makemytrip.com is expected to clear the access token obtained at step 1. This does not log you out of Google (i.e. if you visit www.gmail.com now, you'll see you still can access your emails). 3. I think the only question is why on the second attempt, Google does not ask you to authorize www.makemytrip.com to have accesss to your account. My supposition is that these 2 operations to Log in are happening in a very short interval, so Google supposed you already authorized www.makemytrip.com to have access to your account. You may double check this by attempting to do the Log in with Google operation a bit later (I would probably test after 10 minutes or something like that)
,
Apr 27 2018
,
May 28 2018
--Chrome Identity automated triaging-- This bug is Assigned and has gone one month without any activity, so it is being moved to Available to indicate that it is not actively being worked on. If you are working on this bug, please mark yourself as the owner and move back to Assigned. Please see https://goo.gl/78kbny for more details. Please remove the Services>SignIn or UI>Browser>Profiles components if this bug isn't related to Chrome Identity. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Aug 2
,
Sep 3
--Chrome Identity automated triaging-- This bug is Assigned and has gone one month without any activity, so it is being moved to Available to indicate that it is not actively being worked on. If you are working on this bug, please mark yourself as the owner and move back to Assigned. Please see https://goo.gl/78kbny for more details. Please remove the Services>SignIn or UI>Browser>Profiles components if this bug isn't related to Chrome Identity. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||
►
Sign in to add a comment |
|||||||||||
Comment 1 by nyerramilli@chromium.org
, Mar 29 2018