search

MuckRock / squarelet

MuckRock User Service
GNU Affero General Public License v3.0
11 stars 10 forks source link

FOIA Machine Login Fails #109

Open amandabee opened 6 months ago

amandabee commented 6 months ago

At https://www.foiamachine.org/ I see what I expect:

image I select "Login" which takes me to squarelet, also expected: image

I log in. And I stay in Squarelet, which I wasn't expecting:

image

I select "FOIA Machine" image

amandabee commented 6 months ago

In Chromium I'm able to stay logged in. But I've never, ever successfully logged into FOIA Machine on Firefox.

amandabee commented 6 months ago

Possibly related, possibly totally unrelated, but FOIA Machine has a bad certificate: image

mitchelljkotler commented 6 months ago

Re: SSL issue - The certificate is valid for www.foiamachine.org but not for the bare foiamachine.org

Logging in - it works for me in Firefox and for you in Chromium, so it must be an extension or cookie issue. Can you try it in a private window in Firefox and see what happens? Also, do you get any console errors when it fails to log in?

amandabee commented 6 months ago

Works fine in a firefox private window. Weirdly, I the "Privacy Essentials" extension is enabled in both:

image

Here's my console output from trying to log in. 

15:19:29.919 Cookie “op_browser_state” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite amandabee
15:19:29.938 Loading failed for the <script> with source “https://cdn4.mxpnl.com/libs/mixpanel-2-latest.min.js”. amandabee:1:1
15:19:30.059 Partitioned cookie or storage access was provided to “https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Faccounts.muckrock.com%2Fusers%2Famandabee%2F&title=User%3A%20amandabee&referrer=https%3A%2F%2Faccounts.muckrock.com%2Faccounts%2Flogin%2F&muid=4b03bf76-44ff-48f2-a843-f6a9896db76b85d4d8&sid=db5f33a3-6302-497f-85ab-96cdbb4ce9365dcd3f&version=6&preview=false” because it is loaded in the third-party context and dynamic state partitioning is enabled.
15:19:30.130 Partitioned cookie or storage access was provided to “https://m.stripe.network/inner.html#url=https%3A%2F%2Faccounts.muckrock.com%2Fusers%2Famandabee%2F&title=User%3A%20amandabee&referrer=https%3A%2F%2Faccounts.muckrock.com%2Faccounts%2Flogin%2F&muid=4b03bf76-44ff-48f2-a843-f6a9896db76b85d4d8&sid=db5f33a3-6302-497f-85ab-96cdbb4ce9365dcd3f&version=6&preview=false” because it is loaded in the third-party context and dynamic state partitioning is enabled.
15:19:47.273 Navigated to https://www.foiamachine.org/
15:19:47.632 Loading failed for the <script> with source “https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js”. www.foiamachine.org:1:1