Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Automatic re-open container behavior too late and misses cookies from first response (cause of AWS ALB OIDC login failures) #2646

Open
2 tasks done
dekimsey opened this issue Jun 24, 2024 · 0 comments
Open
2 tasks done

Automatic re-open container behavior too late and misses cookies from first response (cause of AWS ALB OIDC login failures) #2646

dekimsey opened this issue Jun 24, 2024 · 0 comments
Labels
bug Something is broken!

Comments

@dekimsey
Copy link

dekimsey commented Jun 24, 2024 •
edited
Loading

Before submitting a bug report

  • I updated to the latest version of Multi-Account Container and tested if I can reproduce the issue
  • I searched for existing reports to see if it hasn't already been reported

Step to reproduce

(Please refer to the additional information section for more specific diagnostic steps)

  1. Assign an AWS ALB OIDC enabled site to always open in a container.
  2. From another window or application, open a link to the site.
    a. The inital request will load and then redirect to the OIDC provider
    b. Complete three-legged authentication flow.
    c. OIDC provider will now redirect to initial web-app.
  3. Final authentication step fails

Actual behavior

After successful third-party authentication, the final redirect to the original site will fail with a "401 Authenticate" error response from the ALB.

Expected behavior

Navigation works normally and I'm logged in.

From what I can gather, I think this might be specific to AWS ALB SSO integrations. After digging into the request flows the stand-out is that my client no longer has an AWSALBNonce on the redirect back to the web-app for the last leg of the three-legged authentication flow.

Additional informations

The following is based on some digging I had performed and was reporting internally to support teams, so it's backdated about a month ago when the issue first-appeared.

Relevant Addons:

  • Temporary Containers v1.9.2
  • Firefox Multi-Account Containers v8.1.3

I have re-tested this without Temporary Containers enabled and I still observe the problematic behavior.

What's strange to me is this has worked for years without issue (both here and $lastjob). So I'm curious if anything has recently changed on our side, I suspect the answer is no and the recentFirefox 128.0 change may be related. As the behavior has started fairly recently (wrote 2024-05-23). I'm looking to see if that's been a behavior change since last few weeks or so.

Observations:

  1. I open a new tab (assigned to temporary container T1337), and enter https://some-app.hashicorp.services/
    a. The first response from ALB sets a cookie AWSALBAuthNonce=foo , and 302's to Okta for SSO.
    b. Navigation happens in work container1
  2. ... Okta SSO happens
  3. Browser redirected to https://some-app.hashicorp.services/oauth2/idpresponse?code=...
    a. 💥 This request does not have an AWSALBAuthNonce cookie set.

If I manually create a work container tab, then navigate to https://some-app.example.com/ I see the AWSALBAuthNonce cookie persists from the initial response and is present on step #3, and authentication completes successfully.

Provide a copy of Troubleshooting Information page (optional)

Troubleshooting Information 
Application Basics
------------------

Name: Firefox
Version: 127.0
Build ID: 20240606181944
Distribution ID:
Update Channel: release
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:127.0) Gecko/20100101 Firefox/127.0
OS: Darwin 23.5.0 Darwin Kernel Version 23.5.0: Wed May 1 20:12:58 PDT 2024; root:xnu-10063.121.3~5/RELEASE_ARM64_T6000
Rosetta Translated: false
Multiprocess Windows: 6/6
Fission Windows: 6/6 Enabled by default
Remote Processes: 85
Enterprise Policies: Inactive
Google Location Service Key: Found
Google Safebrowsing Key: Found
Mozilla Location Service Key: Found
Safe Mode: false
Memory Size (RAM): 32.0 GB
Disk Space Available: 110 GB

Crash Reports for the Last 3 Days
---------------------------------

Firefox Features
----------------

Name: Firefox Screenshots
Version: 39.0.1
ID: [email protected]

Name: Form Autofill
Version: 1.0.1
ID: [email protected]

Name: Picture-In-Picture
Version: 1.0.0
ID: [email protected]

Name: Web Compatibility Interventions
Version: 125.1.0
ID: [email protected]

Name: WebCompat Reporter
Version: 2.1.0
ID: [email protected]

Remote Features
---------------

bug-1802286-rollout-fix-webcompat-shim-breakage-release-103-107: active
Add an Image to PDF (with Alt Text) - Rollout: (control)
Address Autofill Desktop ( Pref, Release Rollout ): (enable-address-autofill)
CSV Import (Release Rollout): (enable-csv-import)
Device Migration Q4 Spotlights Remaining Population: (treatment)
Encrypted Client Hello: (rollout)
Extensions Migration in Import Wizard - 117+: (control)
Highlighting in PDFs - Rollout: (treatment)
Mixed content level 2 roll out (Release 115+): (control)
Product Insight Telemetry via Server Knobs - Rollout - Release: (control-rollout)
Release - Experiment for Additional Metrics for Product Insights - Rollout: (control-rollout)
SERP Categorization and Consolidated Search Config (US) [Desktop] Relaunch: (control)
Upgrade Spotlight Rollout: (treatment)

Remote Processes
----------------

Type: Isolated Web Content
Count: 74

Type: Preallocated
Count: 3

Type: Extension
Count: 1

Type: Isolated Service Worker
Count: 1

Type: Privileged About
Count: 1

Type: Socket
Count: 1

Type: RDD
Count: 1

Type: Utility JavaScript Oracle
Count: 1

Type: Utility Generic Audio Decoder
Count: 1

Type: Utility AppleMedia
Count: 1

Add-ons
-------

Name: 1Password – Password Manager
Type: extension
Version: 2.24.2
Enabled: true
ID: {d634138d-c276-4fc8-924b-40a0ea21d284}

Name: Add-ons Search Detection
Type: extension
Version: 2.0.0
Enabled: true
ID: [email protected]

Name: Amazon.com
Type: extension
Version: 1.7
Enabled: true
ID: [email protected]

Name: Bing
Type: extension
Version: 1.6
Enabled: true
ID: [email protected]

Name: Clockwise for Firefox
Type: extension
Version: 1.12.0
Enabled: true
ID: {8e8191f9-877a-45a0-b186-b5e83e98b7e9}

Name: Cookie AutoDelete
Type: extension
Version: 3.8.2
Enabled: true
ID: [email protected]

Name: DuckDuckGo
Type: extension
Version: 1.4
Enabled: true
ID: [email protected]

Name: eBay
Type: extension
Version: 1.4
Enabled: true
ID: [email protected]

Name: Firefox Multi-Account Containers
Type: extension
Version: 8.1.3
Enabled: true
ID: @testpilot-containers

Name: Google
Type: extension
Version: 1.4
Enabled: true
ID: [email protected]

Name: Okta Browser Plugin
Type: extension
Version: 6.30.0
Enabled: true
ID: [email protected]

Name: Open external links in a container
Type: extension
Version: 1.0.3
Enabled: true
ID: {f069aec0-43c5-4bbf-b6b4-df95c4326b98}

Name: Temporary Containers
Type: extension
Version: 1.9.2
Enabled: true
ID: {c607c8df-14a7-4f28-894f-29e8722976af}

Name: uBlock Origin
Type: extension
Version: 1.58.0
Enabled: true
ID: [email protected]

Name: Wikipedia (en)
Type: extension
Version: 1.3
Enabled: true
ID: [email protected]

Name: Activist – Balanced
Type: theme
Version: 2.1
Enabled: true
ID: [email protected]

Name: Tree Style Tab
Type: extension
Version: 4.0.18
Enabled: false
ID: [email protected]

Name: Dark
Type: theme
Version: 1.2
Enabled: false
ID: [email protected]

Name: Firefox Alpenglow
Type: theme
Version: 1.4
Enabled: false
ID: [email protected]

Name: Light
Type: theme
Version: 1.2
Enabled: false
ID: [email protected]

Name: System theme — auto
Type: theme
Version: 1.3
Enabled: false
ID: [email protected]

Legacy User Stylesheets
-----------------------

Active: false
Stylesheets: No stylesheets found

Graphics
--------

Features
Window Device Pixel Ratios: 1,1,1,1,1,1
Compositing: WebRender
Font Visibility Debug Info: macOS Platform
Asynchronous Pan/Zoom: wheel input enabled; scrollbar drag enabled; keyboard enabled; autoscroll enabled; smooth pinch-zoom enabled
WebGL 1 Driver WSI Info: outOfProcess: false inProcess: true CGL
WebGL 1 Driver Renderer: Apple -- Apple M1 Pro
WebGL 1 Driver Version: 4.1 Metal - 88.1
WebGL 1 Driver Extensions: GL_ARB_blend_func_extended GL_ARB_draw_buffers_blend GL_ARB_draw_indirect GL_ARB_ES2_compatibility GL_ARB_explicit_attrib_location GL_ARB_gpu_shader_fp64 GL_ARB_gpu_shader5 GL_ARB_instanced_arrays GL_ARB_internalformat_query GL_ARB_occlusion_query2 GL_ARB_sample_shading GL_ARB_sampler_objects GL_ARB_separate_shader_objects GL_ARB_shader_bit_encoding GL_ARB_shader_subroutine GL_ARB_shading_language_include GL_ARB_tessellation_shader GL_ARB_texture_buffer_object_rgb32 GL_ARB_texture_cube_map_array GL_ARB_texture_gather GL_ARB_texture_query_lod GL_ARB_texture_rgb10_a2ui GL_ARB_texture_storage GL_ARB_texture_swizzle GL_ARB_timer_query GL_ARB_transform_feedback2 GL_ARB_transform_feedback3 GL_ARB_vertex_attrib_64bit GL_ARB_vertex_type_2_10_10_10_rev GL_ARB_viewport_array GL_EXT_debug_label GL_EXT_debug_marker GL_EXT_framebuffer_multisample_blit_scaled GL_EXT_texture_compression_s3tc GL_EXT_texture_filter_anisotropic GL_EXT_texture_sRGB_decode GL_APPLE_client_storage GL_APPLE_container_object_shareable GL_APPLE_flush_render GL_APPLE_rgb_422 GL_APPLE_row_bytes GL_APPLE_texture_range GL_NV_texture_barrier
WebGL 1 Extensions: ANGLE_instanced_arrays EXT_blend_minmax EXT_color_buffer_half_float EXT_float_blend EXT_frag_depth EXT_shader_texture_lod EXT_sRGB EXT_texture_compression_rgtc EXT_texture_filter_anisotropic MOZ_debug OES_element_index_uint OES_fbo_render_mipmap OES_standard_derivatives OES_texture_float OES_texture_float_linear OES_texture_half_float OES_texture_half_float_linear OES_vertex_array_object WEBGL_color_buffer_float WEBGL_compressed_texture_s3tc WEBGL_compressed_texture_s3tc_srgb WEBGL_debug_renderer_info WEBGL_debug_shaders WEBGL_depth_texture WEBGL_draw_buffers WEBGL_lose_context WEBGL_provoking_vertex
WebGL 2 Driver WSI Info: outOfProcess: false inProcess: true CGL
WebGL 2 Driver Renderer: Apple -- Apple M1 Pro
WebGL 2 Driver Version: 4.1 Metal - 88.1
WebGL 2 Driver Extensions: GL_ARB_blend_func_extended GL_ARB_draw_buffers_blend GL_ARB_draw_indirect GL_ARB_ES2_compatibility GL_ARB_explicit_attrib_location GL_ARB_gpu_shader_fp64 GL_ARB_gpu_shader5 GL_ARB_instanced_arrays GL_ARB_internalformat_query GL_ARB_occlusion_query2 GL_ARB_sample_shading GL_ARB_sampler_objects GL_ARB_separate_shader_objects GL_ARB_shader_bit_encoding GL_ARB_shader_subroutine GL_ARB_shading_language_include GL_ARB_tessellation_shader GL_ARB_texture_buffer_object_rgb32 GL_ARB_texture_cube_map_array GL_ARB_texture_gather GL_ARB_texture_query_lod GL_ARB_texture_rgb10_a2ui GL_ARB_texture_storage GL_ARB_texture_swizzle GL_ARB_timer_query GL_ARB_transform_feedback2 GL_ARB_transform_feedback3 GL_ARB_vertex_attrib_64bit GL_ARB_vertex_type_2_10_10_10_rev GL_ARB_viewport_array GL_EXT_debug_label GL_EXT_debug_marker GL_EXT_framebuffer_multisample_blit_scaled GL_EXT_texture_compression_s3tc GL_EXT_texture_filter_anisotropic GL_EXT_texture_sRGB_decode GL_APPLE_client_storage GL_APPLE_container_object_shareable GL_APPLE_flush_render GL_APPLE_rgb_422 GL_APPLE_row_bytes GL_APPLE_texture_range GL_NV_texture_barrier
WebGL 2 Extensions: EXT_color_buffer_float EXT_float_blend EXT_texture_compression_rgtc EXT_texture_filter_anisotropic MOZ_debug OES_draw_buffers_indexed OES_texture_float_linear WEBGL_compressed_texture_s3tc WEBGL_compressed_texture_s3tc_srgb WEBGL_debug_renderer_info WEBGL_debug_shaders WEBGL_lose_context WEBGL_provoking_vertex
Target Frame Rate: 30
WebGPU Default Adapter: { "navigator.gpu": null }
WebGPU Fallback Adapter: { "navigator.gpu": null }
GPU #1
Active: Yes
Vendor ID: 0x106b
RAM: 0

Diagnostics
AzureCanvasBackend: skia
AzureContentBackend: skia
AzureFallbackCanvasBackend: skia
CMSOutputProfile: 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
Display0: 3840x2160@0Hz scales:1.000000|1.000000
Display1: 3456x2234@0Hz scales:2.000000|2.000000
DisplayCount: 2
Font Visibility Debug Info: macOS Platform
Decision Log
HW_COMPOSITING:
default: available,
OPENGL_COMPOSITING:
default: available,
WEBRENDER:
default: available,
WEBRENDER_COMPOSITOR:
default: available,
WEBRENDER_PARTIAL:
default: disabled, User disabled via pref, Blocklisted; failure code FEATURE_FAILURE_DISABLED
WEBRENDER_SHADER_CACHE:
default: disabled, Disabled by default, Blocklisted; failure code FEATURE_FAILURE_DISABLED
WEBRENDER_OPTIMIZED_SHADERS:
default: available,
WEBRENDER_ANGLE:
default: available,
env: unavailable, OS not supported, Blocklisted; failure code FEATURE_FAILURE_OS_NOT_SUPPORTED
WEBRENDER_DCOMP_PRESENT:
default: available,
user: disabled, User disabled via pref, Blocklisted; failure code FEATURE_FAILURE_DCOMP_PREF_DISABLED
env: unavailable, Requires GPU process, Blocklisted; failure code FEATURE_FAILURE_NO_GPU_PROCESS
runtime: unavailable, Requires ANGLE, Blocklisted; failure code FEATURE_FAILURE_DCOMP_NOT_ANGLE
WEBRENDER_SCISSORED_CACHE_CLEARS:
default: available,
WEBGPU:
default: available,
env: blocklisted, #BLOCKLIST_FEATURE_FAILURE_MAC_WGPU_NO_METAL_BOUNDS_CHECKS, Blocklisted; failure code FEATURE_FAILURE_MAC_WGPU_NO_METAL_BOUNDS_CHECKS
runtime: blocked, WebGPU cannot be enabled in release or beta, Blocklisted; failure code WEBGPU_DISABLE_RELEASE_OR_BETA
VP8_HW_DECODE:
default: available,
VP9_HW_DECODE:
default: available,
BACKDROP_FILTER:
default: available,
CANVAS_RENDERER_THREAD:
default: available,
ACCELERATED_CANVAS2D:
default: available,
REMOTE_CANVAS:
default: disabled, Disabled via pref, Blocklisted; failure code FEATURE_FAILURE_DISABLED
env: unavailable-no-gpu-process, Disabled without GPU process, Blocklisted; failure code FEATURE_REMOTE_CANVAS_NO_GPU_PROCESS
runtime: blocked, Platform not supported, Blocklisted; failure code FEATURE_REMOTE_CANVAS_NOT_WINDOWS




Media
-----

Audio Backend: audiounit-rust
Max Channels: 2
Preferred Sample Rate: 48000
Roundtrip latency (standard deviation): 17.25ms (0.01)
Codec Support Information:
Codec Name: Software Decoding, Hardware Decoding
H264: Supported, Supported
VP9: Supported, Supported
VP8: Supported, Unsupported
AV1: Supported, Unsupported
HEVC: Unsupported, Unsupported
Theora: Supported, Unsupported
AAC: Supported, Unsupported
MP3: Supported, Unsupported
Opus: Supported, Unsupported
Vorbis: Supported, Unsupported
FLAC: Supported, Unsupported
Wave: Supported, Unsupported
Output Devices
Name: Group, Vendor, State, Preferred, Format, Channels, Rate, Latency
MacBook Pro Speakers: builtin-internal-mic|spk, Apple Inc., Enabled, None, default: F32LE, support: S16LE S16BE F32LE F32BE, 2, default: 48000, support: 44100 - 96000, 775 - 4856
ZoomAudioDevice: zoom.us.zoomaudiodevice, Enabled, None, default: F32LE, support: S16LE S16BE F32LE F32BE, 2, default: 48000, support: 44100 - 192000, 1551 - 2304
Poly BT700: Poly BT700:047F:02E6, Plantronics, Enabled, All, default: F32LE, support: S16LE S16BE F32LE F32BE, 2, default: 48000, support: 48000 - 48000, 87 - 4168
LU28R55: SAM, Enabled, None, default: F32LE, support: S16LE S16BE F32LE F32BE, 2, default: 48000, support: 32000 - 48000, 103 - 4184
Input Devices
Name: Group, Vendor, State, Preferred, Format, Channels, Rate, Latency
MacBook Pro Microphone: builtin-internal-mic|spk, Apple Inc., Enabled, None, default: F32LE, support: S16LE S16BE F32LE F32BE, 1, default: 48000, support: 44100 - 96000, 2414 - 6495
ZoomAudioDevice: zoom.us.zoomaudiodevice, Enabled, None, default: F32LE, support: S16LE S16BE F32LE F32BE, 2, default: 48000, support: 44100 - 192000, 15 - 768
Poly BT700: Poly BT700:047F:02E6, Plantronics, Enabled, All, default: F32LE, support: S16LE S16BE F32LE F32BE, 1, default: 16000, support: 16000 - 16000, 21 - 4112
C922 Pro Stream Webcam: C922 Pro Stream Webcam:046D:085C, Unknown Manufacturer, Enabled, None, default: F32LE, support: S16LE S16BE F32LE F32BE, 2, default: 16000, support: 16000 - 32000, 4085 - 8176

Enumerate database
Content Decryption Modules Information
Key System Name: Video Robustness, Audio Robustness, Capabilities, Clear Lead, HDCP 2.2 Compatible
org.w3.clearkey: {"persistent":"optional","distinctive":"not-allowed","sessionType":"[Temporary]","scheme":"[cenc,cbcs,cbcs-1-9]","codec":{"decodingAndDecrypting":[],"decryptingOnly":["h264","aac","flac","opus","vp9","av1","vorbis","vp8"]}}, No, No
com.widevine.alpha: SW_SECURE_CRYPTO,SW_SECURE_DECODE, SW_SECURE_CRYPTO, {"persistent":"optional","distinctive":"not-allowed","sessionType":"[Temporary]","scheme":"[cenc,cbcs,cbcs-1-9]","codec":{"decodingAndDecrypting":["h264","vp9","av1","vp8"],"decryptingOnly":["aac","flac","opus","vorbis"]}}, Yes, No

Environment Variables
---------------------

MOZ_CRASHREPORTER_EVENTS_DIRECTORY: /Users/daniel.kimsey/Library/Application Support/Firefox/Profiles/ei0nlozo.default-release/crashes/events
MOZ_CRASHREPORTER_RESTART_ARG_1:
MOZ_CRASHREPORTER_DATA_DIRECTORY: /Users/daniel.kimsey/Library/Application Support/Firefox/Crash Reports
MOZ_CRASHREPORTER_PING_DIRECTORY: /Users/daniel.kimsey/Library/Application Support/Firefox/Pending Pings
MOZ_CRASHREPORTER_STRINGS_OVERRIDE: /Applications/Firefox.app/Contents/Resources/browser/crashreporter-override.ini
MOZ_LAUNCHED_CHILD:
MOZ_APP_SILENT_START:
XRE_PROFILE_PATH:
XRE_PROFILE_LOCAL_PATH:
XRE_START_OFFLINE:
XRE_BINARY_PATH:
XRE_RESTARTED_BY_PROFILE_MANAGER:

Experimental Features
---------------------

Cookies: SameSite=None requires secure attribute (network.cookie.sameSite.noneRequiresSecure): false
CSS: Masonry Layout (layout.css.grid-template-masonry-value.enabled): false
Developer Tools: Service Worker debugging (devtools.debugger.features.windowless-service-workers): false
Media: JPEG XL (image.jxl.enabled): false
Address Bar: show results during IME composition (browser.urlbar.keepPanelOpenDuringImeComposition): false
Web API: WebGPU (dom.webgpu.enabled): false
WebRTC Global Mute Toggles (privacy.webrtc.globalMuteToggles): false

Remote Experiments
------------------

Discovery of Search SAP Existing EN: control
Fox Guide Reader Mode - Existing User Holdback: control
Long term holdback 2024 H1 Velocity Desktop: delivery
MacOS Background Tab Power Savings Release: treatment-a

Important Modified Preferences
------------------------------

accessibility.typeaheadfind.flashBar: 0
browser.contentblocking.category: strict
browser.search.region: US
browser.sessionstore.upgradeBackup.latestBuildID: 20240526221752
browser.startup.homepage_override.buildID: 20240606181944
browser.startup.homepage_override.mstone: 127.0
browser.toolbars.bookmarks.visibility: always
browser.urlbar.placeholderName: Google
browser.urlbar.placeholderName.private: Google
browser.urlbar.quicksuggest.migrationVersion: 2
browser.urlbar.quicksuggest.scenario: offline
browser.urlbar.suggest.quicksuggest.nonsponsored: false
browser.urlbar.suggest.quicksuggest.sponsored: false
browser.urlbar.tabToSearch.onboard.interactionsLeft: 0
browser.urlbar.tipShownCount.searchTip_onboard: 4
browser.urlbar.tipShownCount.searchTip_redirect: 4
doh-rollout.doneFirstRun: true
doh-rollout.home-region: US
doh-rollout.mode: 0
doh-rollout.self-enabled: true
doh-rollout.uri: https://mozilla.cloudflare-dns.com/dns-query
dom.forms.autocomplete.formautofill: true
dom.security.https_only_mode: true
dom.security.https_only_mode_ever_enabled: true
extensions.formautofill.creditCards.reauth.optout: MDIEEPgAAAAAAAAAAAAAAAAAAAEwFAYIKoZIhvcNAwcECOc5Uvgt+FhJBAgKaUzCdeEFrg==
extensions.lastAppVersion: 127.0
idle.lastDailyNotification: 1718989657
media.gmp-gmpopenh264.abi: aarch64-gcc3
media.gmp-gmpopenh264.hashValue: 391efb184373d533713a9e99a9e63c3bbaf614e8d8bdfdd84d4d5e53b9a737e75032187309dd00e58b58bb1033ab68d199f994744f6add57dd08f5fb
media.gmp-gmpopenh264.lastDownload: 1688568728
media.gmp-gmpopenh264.lastDownloadFailed: 1700343273
media.gmp-gmpopenh264.lastDownloadFailReason: Error: Failed downloading via ServiceRequest, status: 0, channelStatus: 2152398878, errorCode: 2, reason: error
media.gmp-gmpopenh264.lastInstallStart: 1700343273
media.gmp-gmpopenh264.lastUpdate: 1688568728
media.gmp-gmpopenh264.version: 2.3.2
media.gmp-manager.buildID: 20240606181944
media.gmp-manager.lastCheck: 1718629357
media.gmp-manager.lastEmptyCheck: 1718629357
media.gmp-widevinecdm.abi: aarch64-gcc3
media.gmp-widevinecdm.hashValue: 3aa1e3e34abffb781fbbcb411a0381a4eb641793042987a8b6bcffdb2c366b52b0cb059c36dceff7146e80fbb98c5ccb2f98af726ce2619fa7bbd4b1
media.gmp-widevinecdm.lastDownload: 1697297005
media.gmp-widevinecdm.lastDownloadFailed: 1700343273
media.gmp-widevinecdm.lastDownloadFailReason: Error: Failed downloading via ServiceRequest, status: 0, channelStatus: 2152398878, errorCode: 2, reason: error
media.gmp-widevinecdm.lastInstallStart: 1700343273
media.gmp-widevinecdm.lastUpdate: 1697297005
media.gmp-widevinecdm.version: 4.10.2710.0
media.gmp.storage.version.observed: 1
media.videocontrols.picture-in-picture.video-toggle.first-seen-secs: 1684766565
media.videocontrols.picture-in-picture.video-toggle.has-used: true
network.dns.disablePrefetch: true
network.http.referer.disallowCrossSiteRelaxingDefault.top_navigation: true
network.http.speculative-parallel-limit: 0
network.predictor.enabled: false
network.prefetch-next: false
places.database.lastMaintenance: 1718629398
privacy.annotate_channels.strict_list.enabled: true
privacy.fingerprintingProtection: true
privacy.purge_trackers.date_in_cookie_database: 0
privacy.purge_trackers.last_purge: 1718989657955
privacy.query_stripping.enabled: true
privacy.query_stripping.enabled.pbmode: true
privacy.sanitize.pending: [{"id":"newtab-container","itemsToClear":[],"options":{}}]
privacy.trackingprotection.emailtracking.enabled: true
privacy.trackingprotection.enabled: true
privacy.trackingprotection.socialtracking.enabled: true
privacy.userContext.enabled: true
privacy.userContext.extension: {f069aec0-43c5-4bbf-b6b4-df95c4326b98}
privacy.userContext.ui.enabled: true
security.oskeystore.test.encrypted: E32UGdJkPU9cVLhuJ9IBtaANuKEBTOcUGEsrTc+nyb4=
security.oskeystore.test.label: c8d02521-721c-4b5d-8a6d-c8a7a6a272e5
security.sandbox.content.tempDirSuffix: 42d2a89f-7bde-47d0-bf7a-a50d2ff2ae41
services.sync.declinedEngines:
services.sync.engine.addresses.available: true
signon.management.page.os-auth.optout: MDIEEPgAAAAAAAAAAAAAAAAAAAEwFAYIKoZIhvcNAwcECJI2VSvvn1NcBAiw70pXXeAbdg==
signon.rememberSignons: false
storage.vacuum.last.content-prefs.sqlite: 1718629397
storage.vacuum.last.index: 2
storage.vacuum.last.places.sqlite: 1717710775

Important Locked Preferences
----------------------------

fission.autostart.session: true

Places Database
---------------

Entity: sqlite_schema
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 24.6
Sequentiality (%): 16.8

Entity: moz_origins
Count: 3278
Size (KiB): 192
Size (%): 0.3
Efficiency (%): 65
Sequentiality (%): 16.8

Entity: sqlite_autoindex_moz_origins_1
Count: -
Size (KiB): 160
Size (%): 0.2
Efficiency (%): 68.9
Sequentiality (%): 16.8

Entity: moz_places
Count: 96039
Size (KiB): 37120
Size (%): 52.1
Efficiency (%): 78.8
Sequentiality (%): 16.8

Entity: moz_historyvisits
Count: 182272
Size (KiB): 5280
Size (%): 7.4
Efficiency (%): 93.8
Sequentiality (%): 16.8

Entity: moz_inputhistory
Count: 1250
Size (KiB): 96
Size (%): 0.1
Efficiency (%): 40.5
Sequentiality (%): 16.8

Entity: sqlite_autoindex_moz_inputhistory_1
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 91.1
Sequentiality (%): 16.8

Entity: moz_bookmarks
Count: 189
Size (KiB): 32
Size (%): 0
Efficiency (%): 41.8
Sequentiality (%): 16.8

Entity: moz_bookmarks_deleted
Count: 0
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: sqlite_autoindex_moz_bookmarks_deleted_1
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: moz_keywords
Count: 8
Size (KiB): 32
Size (%): 0
Efficiency (%): 0.4
Sequentiality (%): 16.8

Entity: sqlite_autoindex_moz_keywords_1
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 0.3
Sequentiality (%): 16.8

Entity: sqlite_sequence
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 0.1
Sequentiality (%): 16.8

Entity: moz_anno_attributes
Count: 3
Size (KiB): 32
Size (%): 0
Efficiency (%): 0.3
Sequentiality (%): 16.8

Entity: sqlite_autoindex_moz_anno_attributes_1
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 0.3
Sequentiality (%): 16.8

Entity: moz_annos
Count: 146
Size (KiB): 32
Size (%): 0
Efficiency (%): 45.8
Sequentiality (%): 16.8

Entity: moz_items_annos
Count: 0
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: moz_meta
Count: 5
Size (KiB): 32
Size (%): 0
Efficiency (%): 1.1
Sequentiality (%): 16.8

Entity: moz_places_metadata
Count: 55962
Size (KiB): 2816
Size (%): 4
Efficiency (%): 74.3
Sequentiality (%): 16.8

Entity: moz_places_metadata_search_queries
Count: 0
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: sqlite_autoindex_moz_places_metadata_search_queries_1
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: moz_previews_tombstones
Count: 0
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: sqlite_stat1
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 4
Sequentiality (%): 16.8

Entity: moz_places_url_hashindex
Count: -
Size (KiB): 1536
Size (%): 2.2
Efficiency (%): 89.9
Sequentiality (%): 16.8

Entity: moz_places_hostindex
Count: -
Size (KiB): 2848
Size (%): 4
Efficiency (%): 82.9
Sequentiality (%): 16.8

Entity: moz_places_visitcount
Count: -
Size (KiB): 1056
Size (%): 1.5
Efficiency (%): 79.5
Sequentiality (%): 16.8

Entity: moz_places_frecencyindex
Count: -
Size (KiB): 1056
Size (%): 1.5
Efficiency (%): 86.7
Sequentiality (%): 16.8

Entity: moz_places_lastvisitdateindex
Count: -
Size (KiB): 2176
Size (%): 3.1
Efficiency (%): 72.1
Sequentiality (%): 16.8

Entity: moz_places_guid_uniqueindex
Count: -
Size (KiB): 2080
Size (%): 2.9
Efficiency (%): 93.4
Sequentiality (%): 16.8

Entity: moz_places_originidindex
Count: -
Size (KiB): 1152
Size (%): 1.6
Efficiency (%): 81.6
Sequentiality (%): 16.8

Entity: moz_historyvisits_placedateindex
Count: -
Size (KiB): 4064
Size (%): 5.7
Efficiency (%): 89.6
Sequentiality (%): 16.8

Entity: moz_historyvisits_fromindex
Count: -
Size (KiB): 2304
Size (%): 3.2
Efficiency (%): 83.7
Sequentiality (%): 16.8

Entity: moz_historyvisits_dateindex
Count: -
Size (KiB): 3584
Size (%): 5
Efficiency (%): 83.7
Sequentiality (%): 16.8

Entity: moz_bookmarks_itemindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 6.4
Sequentiality (%): 16.8

Entity: moz_bookmarks_parentindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 6.1
Sequentiality (%): 16.8

Entity: moz_bookmarks_itemlastmodifiedindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 10.8
Sequentiality (%): 16.8

Entity: moz_bookmarks_dateaddedindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 9
Sequentiality (%): 16.8

Entity: moz_bookmarks_guid_uniqueindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 11.3
Sequentiality (%): 16.8

Entity: moz_keywords_placepostdata_uniqueindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 0.3
Sequentiality (%): 16.8

Entity: moz_annos_placeattributeindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 5.5
Sequentiality (%): 16.8

Entity: moz_items_annos_itemattributeindex
Count: -
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: moz_places_metadata_placecreated_uniqueindex
Count: -
Size (KiB): 1152
Size (%): 1.6
Efficiency (%): 87.1
Sequentiality (%): 16.8

Entity: moz_places_metadata_referrerindex
Count: -
Size (KiB): 672
Size (%): 0.9
Efficiency (%): 77.9
Sequentiality (%): 16.8

Entity: moz_places_altfrecencyindex
Count: -
Size (KiB): 1024
Size (%): 1.4
Efficiency (%): 79.9
Sequentiality (%): 16.8

Entity: moz_places_extra
Count: 0
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Entity: moz_historyvisits_extra
Count: 0
Size (KiB): 32
Size (%): 0
Efficiency (%): 0
Sequentiality (%): 16.8

Accessibility
-------------

Activated: false
Prevent Accessibility: 0

Library Versions
----------------

NSPR
Expected minimum version: 4.35
Version in use: 4.35

NSS
Expected minimum version: 3.100
Version in use: 3.100

NSSSMIME
Expected minimum version: 3.100
Version in use: 3.100

NSSSSL
Expected minimum version: 3.100
Version in use: 3.100

NSSUTIL
Expected minimum version: 3.100
Version in use: 3.100

Sandbox
-------

Content Process Sandbox Level: 3
Effective Content Process Sandbox Level: 3

Startup Cache
-------------

Disk Cache Path: /Users/daniel.kimsey/Library/Caches/Firefox/Profiles/ei0nlozo.default-release/startupCache/startupCache.8.little
Ignore Disk Cache: false
Found Disk Cache on Init: false
Wrote to Disk Cache: true

Internationalization & Localization
-----------------------------------

Application Settings
Requested Locales: ["en-US"]
Available Locales: ["en-US"]
App Locales: ["en-US"]
Regional Preferences: ["en-US"]
Default Locale: "en-US"
Operating System
System Locales: ["en-US"]
Regional Preferences: ["en-US"]

Remote Debugging (Chromium Protocol)
------------------------------------

Accepting Connections: false
URL:

Printing
--------

Modified print settings
-----------------------

print_printer: Mozilla Save to PDF
print.more-settings.open: true
print.printer_hl-2340dw.local.print_bgcolor: false
print.printer_hl-2340dw.local.print_bgimages: false
print.printer_hl-2340dw.local.print_duplex: 1
print.printer_hl-2340dw.local.print_footercenter:
print.printer_hl-2340dw.local.print_footerleft: &PT
print.printer_hl-2340dw.local.print_footerright: &D
print.printer_hl-2340dw.local.print_headercenter:
print.printer_hl-2340dw.local.print_headerleft: &T
print.printer_hl-2340dw.local.print_headerright: &U
print.printer_hl-2340dw.local.print_shrink_to_fit: true

Content Analysis (DLP)
----------------------

Active: false
Connected to Agent:
Agent Path:
Agent Failed Signature Verification:
Request Count:

Footnotes

  1. At some point in step 1, FF re-opens the tab into the assigned container, work. From the available multi-tab logs, I cannot tell if this action happens before the initial request or after. Based on what I'm seeing here with this nonce cookie being dropped, I'd assume after its the only action that makes sense. ↩
@dekimsey dekimsey added the bug Something is broken! label Jun 24, 2024
@dekimsey dekimsey changed the title Automatic re-open container behavior too late and missies cookies from first response (causing AWS ALB SSO login failure) Automatic re-open container behavior too late and missies cookies from first response (cause of AWS ALB OIDC login failures) Jun 24, 2024
@dekimsey dekimsey changed the title Automatic re-open container behavior too late and missies cookies from first response (cause of AWS ALB OIDC login failures) Automatic re-open container behavior too late and misses cookies from first response (cause of AWS ALB OIDC login failures) Jun 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something is broken!
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@dekimsey