search

mozilla / id.webmaker.org

OAuth 2.0 identity provider for Webmaker
https://id.webmaker.org
Mozilla Public License 2.0
18 stars 51 forks source link

Unable to create new account #451

Open cognitiaclaeves opened 5 years ago

cognitiaclaeves commented 5 years ago

Hi. I'm unable to create a new account for Thimble when browsing with Firefox developer edition, out of the box. I'm seeing this in the javascript console:

Content Security Policy: The page’s settings blocked the loading of a resource at self (“script-src”). Source: ;(function installGlobalHook(window) { .... signup:1 Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified You have failed the reCAPTCHA test signup.jsx:186:10 handleFormData/</< signup.jsx:186:10

cognitiaclaeves commented 5 years ago

Hello?

awdDev786 commented 5 years ago

Any solution to this issue?

ryanwarsaw commented 5 years ago

I am unable to replicate this issue on Chrome, Firefox (Beta) or Firefox Developer Edition. I suspect this issue was either remedied by DevOps, or it's a one-off case. In either event, if you continue to have this problem occur please let us know and provide version information, etc.

awdDev786 commented 5 years ago

actually this issue is coming in local deployment where i cant see recaptcha image at the bottom right corner of page.

ryanwarsaw commented 5 years ago

@awdDev786 For local development, you can disable the ReCaptcha functionality (recommended) by updating your existing .env to include the RECAPTCHA_DISABLED=true flag.

See: https://github.com/mozilla/id.webmaker.org/blob/master/sample.env#L11

awdDev786 commented 5 years ago

It is already true in .env and samples.env.

image

ryanwarsaw commented 5 years ago

@awdDev786 Discussed with DevOps, we're not aware of an issue like this but it'll likely go unfixed since Thimble is currently being sunset. However if you'd like to dig into the issue and create a fix, I'll gladly merge it in.