search

communitybridge / easycla-contributor-console

A stand-alone EasyCLA console for contributors
MIT License
2 stars 8 forks source link

Authentication flow fails when redirecting during sign-in on the Contributor Console. #430

Open nickmango opened 6 days ago

nickmango commented 6 days ago

When users attempt to authenticate via email on the Contributor Console, the page hangs after redirecting during the sign-in process. The expected behavior is for the sign-in process to complete and proceed seamlessly. However, authentication via LFID (e.g., use case: vthakurs LFID) works as intended.

Steps to Reproduce:

  1. Click sign agreement on gerrit|github
  2. Proceed to sign either with individual or coporate contributor options
  3. Choose Email as the authentication method.
  4. Enter the email and proceed with the sign-in process.

  5. Observe that the page hangs after redirecting.

Expected Behavior:

The sign-in process should complete successfully, and the user should be redirected to the appropriate page or console after signing in.

Actual Behavior:

The page remains hanging, and the sign-in process does not complete.

Environment:

Impact:

Users authenticating via email cannot access the Contributor Console, impacting usability and adoption for email-based users.

Attachments:

Image

Image

amolsontakke3576 commented 6 days ago

@nickmango I have tested on dev and working file with login with Gmail PFA Screencast from 28-11-24 07:37:42 PM IST.webm

nickmango commented 6 days ago

lfx-header-v2.js:3 Refused to load the script 'https://www.googletagmanager.com/gtm.js?id=GTM-K4CSDQH' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.dev.platform.linuxfoundation.org/lfx-header-v2.js https://cdn.platform.linuxfoundation.org/lfx-header-v2.js https://cdn.dev.platform.linuxfoundation.org/lfx-header-v2-no-zone.js https://cdn.staging.platform.linuxfoundation.org/lfx-header-v2-no-zone.js https://cdn.platform.linuxfoundation.org/lfx-header-v2-no-zone.js https://cdn.dev.platform.linuxfoundation.org/lfx-footer-no-zone.js https://cdn.staging.platform.linuxfoundation.org/lfx-footer-no-zone.js https://cdn.platform.linuxfoundation.org/lfx-footer-no-zone.js". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. @alyeldegwy kindly help look into this

nickmango commented 6 days ago

https://pcc.dev.platform.linuxfoundation.org/?error=access_denied&error_description=matching%20platform%20username%20missing%20in%20SSO%20directory&state=NGZHXy1MNTZPV1lBeThCZFBZSF9WalBreTFDS0o0cmRfNDdCVzdqbTdlVA%3D%3D