sblask-webextensions / webextension-skip-redirect

Some web pages use intermediary pages before redirecting to a final page. This add-on tries to extract the final url from the intermediary url and goes there straight away if successful.
https://addons.mozilla.org/firefox/addon/skip-redirect/
MIT License
481 stars 45 forks source link

Skip all redirects mode causes login loop on Atlassian #347

Closed wesinator closed 10 months ago

wesinator commented 1 year ago

New Issue Checklist (tick off like this: [x])

What is your browser?

What is your operating system?

Description (please include examples/screenshots where applicable)

With Skip all redirects mode, the exclusions do not apply to Atlassian SSO login, and causes an infinite loop when logging into atlassian cloud with sso.

URL: https://id.atlassian.com/login/authorize?application=jira&continue=https%3A%2F%2Fid.atlassian.com%2Fjoin%2Fuser-access%3Fresource%3Dari%253Acloud%253Ajira%253A%253Asite%252F ...

I would think the /login exclusion would handle this URL but it didn't at the time of writing.

sblask commented 1 year ago

I am getting a BadRequest page for the link you posted, but even just https://id.atlassian.com/login/authorize?application=jira&continue=https%3A%2F%2Fid.atlassian.com should trigger redirect skipping if the /login were not working.

wesinator commented 1 year ago

I am getting a BadRequest page for the link you posted, but even just https://id.atlassian.com/login/authorize?application=jira&continue=https%3A%2F%2Fid.atlassian.com should trigger redirect skipping if the /login were not working.

try visiting https://acme.atlassian.net/browse/EXAMPLE-123 (notional JIRA link example)

the link was an incomplete reference link, I didn't want to private a full private link.

You might reproduce attempting to visit jira from an id.atlassian.net /JIRA URL in your history, with an SSO login account.

sblask commented 1 year ago

The brings me to: https://id.atlassian.com/login?continue=https%3A%2F%2Fid.atlassian.com%2Fjoin%2Fuser-access%3Fresource%3Dari%253Acloud%253Ajira%253A%253Asite%252F84d20082-20e4-41d4-9582-0fcc32d93529%26continue%3Dhttps%253A%252F%252Facme.atlassian.net%252Fbrowse%252FEXAMPLE-123&application=jira and I don't get any looping. Maybe you have another extension enabled that causes this>

pe1uca commented 1 year ago

I added these to the skips and now it works properly.

id.atlassian.com/login/authorize  
id.atlassian.com/join/user-access