search

mozilla-iam / auth0-custom-lock

Front-end for the newly refreshed auth0 “Lock” interface: the New Login Experience (NLX)
Mozilla Public License 2.0
8 stars 15 forks source link

Cannot login with contributor LDAP account #188

Closed viorelaioia-zz closed 6 years ago

viorelaioia-zz commented 6 years ago

STR:

  1. Navigate to mozillians.org
  2. Enter volunteer ldap email address in email field

Expected: Password window is shown.

Actual: "Send me an email" window is displayed. Contributor LDAP is seen as non-ldap, so passwordless flow window is returned.

Note: This is happening for all Mozilla properties.

viorelaioia-zz commented 6 years ago

CC: @hidde , @andrewkrug , @gdestuynder

hidde commented 6 years ago

This is caused by Person API calls being blocked by our Content Security-Policy, in prod config the connect-src directive was accidentally set to .org domain (but in prod it is .com)

Fixed in this PR: https://github.com/mozilla-iam/auth0-custom-lock/pull/187

Let’s roll out asap.

andrewkrug commented 6 years ago

Fixed the CSP manually.

viorelaioia-zz commented 6 years ago

Contributor LDAP login works as expected now! Closing the issue.