mozilla/browserid — Issue #630: Clicking "This is not me" on an RP prevents Sign Out on Diresworb.org
Author: jbonacci
Created: 2011-11-22 04:41:37+00:00
State: open

I found this one while regressing some relay frame issues.

1. Sign In on Diresworb.org
2. Click Sign In on an RP, like beta.myfavoritebeer.org.
3. Note that the account used in Diresworb.org is now available on the RP.
4. Sign Out of the RP.
5. Click Sign In on the RP
6. Click "This is not me"
7. Close the Sign In window on the RP, or just leave the RP as is
8. Attempt to Sign Out on Diresworb.org
9. Nothing appears to happen, but if you refresh the page, you are indeed signed out.

The logs look normal to me accept for extra entries in the browserid.log file:
{"level":"info","message":"127.0.0.1 - - [Tue, 22 Nov 2011 04:35:46 GMT] \"POST /wsapi/logout HTTP/1.0\" 200 - \"https://diresworb.org/\" \"Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1\""}
{"level":"info","message":"127.0.0.1 - - [Tue, 22 Nov 2011 04:35:46 GMT] \"POST /wsapi/logout HTTP/1.0\" 200 - \"https://diresworb.org/\" \"Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1\""}
{"level":"info","message":"127.0.0.1 - - [Tue, 22 Nov 2011 04:35:48 GMT] \"POST /wsapi/logout HTTP/1.0\" 200 - \"https://diresworb.org/\" \"Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1\""}
{"level":"info","message":"127.0.0.1 - - [Tue, 22 Nov 2011 04:35:48 GMT] \"POST /wsapi/logout HTTP/1.0\" 200 - \"https://diresworb.org/\" \"Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1\""}

But, I think this is me "clicking" on the Sign Out button on Diresworb.org.

Duplicated on Mac and on Windows using Firefox and Google Chrome.