RocketChat / RocketChat/Rocket.Chat

[Bug] CAS Log in / Authenticate is not possible with some browsers

Open
#20,140 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
46.1k
Forks
13.9k
Avg merge
3d 3h
Merged PRs (30d)
130

Description

Hello,

Description:

With CAS authentication, the actual way to log in prevent access with some broswers (tested with Jelly Browser).

The Log in button is stuck with its loading icon forever (like image in step 5 of https://github.com/RocketChat/Rocket.Chat/issues/7071).

This is the case if CAS session :

  • doesn't exists and user open one in other window (because pop up don't fire).
  • already exists (opened previously).

I've also tested a fallback solution : using direct URL of the log in pop up.
The URL is something like that : your-cas/cas/login?service=your-rocket/tocken
But it seems the tocken is necessary but not reusable, so this solution doesn't permit acces neither.

Steps to reproduce:
Expected behavior:
Actual behavior:

see "description".

Server Setup Information:

Version of Rocket.Chat Server: 3.9.x
Operating System: Linux

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file or test is named. Start by reproducing CAS authentication in the affected browser with both an existing and a newly opened CAS session, then trace the login popup and token flow; done means authentication completes without a stuck loading state in both cases.

Written by the indexing model from the issue text.

Assessment

Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.