Infinite passwordless loop

Ask for email -> I use the link sent to the e-mail -> ask for email in it

(Actually experienced this prob while trying to log in voice.mozilla.org)

Hi @Sitieno14,

are you using the same browser for triggering the email and opening the link from the authentication email?

If yes, can you try the same “trigger mail, click link” loop in a private browser window?

Regards,
Henrik

Same issue, using normal firefox 60.4.0esr, I canot log in to voice.mozillla.org.

Your suggestion of using a private browser window did fix it though.

Thanks, but why would that fix it? Is normal firefox not maintaining cookies or something?

Edit: it does not let me log in anymore, even in a private browser. Really weird. I got it to work once then it did not work when closed the browser and retried.

Hi @alec0061,

thanks for being patient.

  • About not being able to log in any longer: Once your session times out (in a Private Browsing Window this is when you close the window), you need to request a new login link.
  • About Private Mode vs. Regular Mode: Maybe you still have some stale cookies in your browser? You could try by removing all cookies from auth0.

Hope this helps.

Best regards,
Henrik

Same problem for me. It is a problem with your ultra-short expiry delay of 15 minutes. As your email servers are on greylist and therefore tarpitted (by 00:19:46 according to email header), you will always arrive too late in my inbox.

The temporary links of other systems usually expire after hours or days. Can you increase your delay to half an hour at least?

Hi @alec0061,

… do you still have the same behavior? Even in a Private Browser session?

Best regards,
Henrik

I get the very same problem here, it was working from another laptop with a ubuntu, and here with a debian buster 60.4.0esr (64 bits) i can’t get logged in. I did try with two different mail address each time using same browser.
Same loggin on this discourse did work, so it look like this is a voice.mozilla.org problem.

in both cases i did use a noscript plugin, i did test with private browsing just does not work.
It look like enrollment proceed but at the end voice.mozilla.org reset it like if nobody was logged.

@pl11, thank you very much for the detailed information. We need to look into this and try to get further insight.

@viorelaioia1 and @rleitan, do you have an idea on how to reproduce the behavior described by @pl11?

@gregor there seems to be a something something with voice.m.o?

-Henrik

Hi @Hoffmann,

thanks for your comment on the 15 minutes lifetime of our email verification. We hear this every once in a while and finally added corresponding entries to the FAQ for Mozilla IAM:

https://wiki.mozilla.org/IAM/Frequently_asked_questions#Q:_Why_do_the_email_login_links_expire_after_15_minutes.3F

Best regards,
Henrik