sign in with pin reflow multiple times between accounts causes infinite PIN rejection

mozilla / persona-yahoo-bridge

A ProxyIdP service for bridging major IdPs who lack support for the BrowserID protocol.

26 stars 15 forks source link

sign in with pin reflow multiple times between accounts causes infinite PIN rejection #240

Closed edwindotcom closed 11 years ago

edwindotcom commented 11 years ago

Steps are sketchy here. But currently PINs aren't working for me on Mac FF 22.

Sign into a combination of 2 yahoo accounts back and forth ( i think within 5 min) where it brings up the mismatch and PIN flow.

actual: eventually you end up in a state where you can't validate with a PIN anymore. I waited 10 min and that didn't seem to fix it.

Note: you may need to sign in with a 3rd alias but I can't confirm that.

edwindotcom commented 11 years ago

looks like this might be a auto deployer issue - clearing cache and switching to clean profile isn't fixing it.

ozten commented 11 years ago

Interesting. I'll try to reproduce.

Background: You can only have 1 PIN at a time. If you go through the sign in flow again and click 'Continue', it will reset your Cookie which is where the PIN is stored. It will also send you another email.

A possible problem is email is slow or is in the Spam folder and your typing in a previous PIN.

karlht commented 11 years ago

Nope, this is busted. New Firefox profile, cleared cache, cleared cookies. Logged in with an alias, got email sent (with correct timestamp), entered the PiN from the email -- no match.

Sorry, guys.

ozten commented 11 years ago

Good catch!

Sorry, there was a problem with the pin code db cookie. Fixed. Re-deployed to dev.

edwindotcom commented 11 years ago

closing this - it's fixed.