[Webkit-unassigned] [Bug 24332] New: OpenID authentication redirect stops in Safari, Chrome

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Mar 3 11:30:16 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=24332

           Summary: OpenID authentication redirect stops in Safari, Chrome
           Product: WebKit
           Version: 525.x (Safari 3.2)
          Platform: Macintosh Intel
               URL: https://review.source.android.com/
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: sop at google.com


When using a Google Account to login to Gerrit Code Review
(review.source.android.com) the OpenID authentication process stops when a 302
redirect is issued by www.google.com and is not executed by WebKit.

Observed in both:
  Safari 3.2.1 (5525.27.1)
  Chrome 1.0.154.48

Steps to reproduce:
 - Have a Google Account ready (https://www.google.com/accounts/NewAccount)
 - Go to http://www.google.com/
 - Verify you are signed into the Google Account (check top right).  If not,
sign in now with "Sign In" link.

 - Go to https://review.source.android.com/
 - Click "Sign In" in top right
 - Click "Sign in with a Google Account"

 - DO NOT CHECK "Remember me"
 - Click "Continue Sign-In" button

 - IFrame gets stuck.  It ignored a 302 redirect sent by www.google.com.

This exact procedure works fine in Opera, Firefox, MSIE, and older versions of
Safari (3.0).

However, a slightly different procedure permits the login to work:
 - Go to http://www.google.com/
 - Verify you are signed out. Click "Sign Out" in top right if necessary.

 - Go to https://review.source.android.com/
 - Click "Sign In"
 - Click "Sign In" in top right
 - Click "Sign in with a Google Account"

 - Enter your Google Account information
 - Sign In

 - DO NOT CHECK "Remember me"
 - Click "Continue Sign-In" button


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list