Reoccuring problem with Firefox and Apple / iCloud accounts
I have been having a reoccuring problem signing into Apple / icloud accounts. Basically, it won't let me login even though the password is correct. There are several ways to fix the problem, you have to try each one since there is no consistent way to fix it.
1. Sign in using appleid.apple.com instead of icloud, which seems to work better.. 2. Clear site data for apple.com and icloud.com, which sometimes work. 3. Clear all browsing data, if the previous step doesn't work. 4. Create a new profile if the previous step doesn't work.
The problem is that the problem comes right back in the next login. No fix seems to last more than a few days. It's not an extension issue since the problem occurs even with extensions. It's not using standard tracking and ublock if enable is off for the apple domains.
Anyone has an idea what is causing this? There are no issue signing in using chromium based browsers. The issue has been around for a year now.
Toate răspunsurile (1)
TL;DR is they're sending session cookies with wrong parameters, that all browsers throw away immediately, so they have no chance to ever read them back. But if they do, they must be the ones they sent recently. So there's not benefit from them, no harm if they're missing completely, but they're overly sensitive if they're not from the current session. (Read: if they somehow succeed in setting one for your storage once, they're usually unable to re–set them next time, but flag the stale one as a "wrong" session and error out in the authentication.)
It's not clear why the flow is like that, and more interestingly, why the data stored and challenges done differ between users so there's some "mysterious" variance in how they break the login flows for some of their users "more" than for others. 🙈
(Chromium browsers interpret missing/implicit SameSite differently than Firefox, so the effective SameSite when set, and then potentially re–set or read back is different.)
The timing sounds familiar.
About a year ago Apple changed some cookie settings that lead to issues for folks who had logged in sessions from some time ago, and used "open previous windows…" on startup i.e. session restore functionality. bugzil.la/1987563
(In between there were folks using Ubuntu distributed Snap versions singled out on user agent grounds…) bugzil.la/1983681
This was resolved with them not affecting any broader demographics any longer, but there's this bug since then that sounds like what you're facing, and none of that makes much sense, beyond that they're still setting these sessions: bugzil.la/2012345