Logging into the website, but the extension just asks to log in again

mythmon

Full disclosure, I'm a Mozilla employee, and I'm intending to use this add-on as a converted web extension in Firefox Nightly 57. I'll also be verifying any problems I have in Chrome as well.

I was able to install the extension in both Firefox and Chrome, but I'm having some trouble. When I click the toolbar button for 1Password, I get directed to log in, which works fine. After getting signed in I have access to everything in the web UI, but the toolbar button doesn't change, and clicking it again just asks me to log in again.

Like I said, I'm seeing this behavior in both Chrome and Firefox. Is there something I'm missing?

---

1Password Version: Not Provided
Extension Version: 0.8.2
OS Version: Linux
Sync Type: Not Provided

beyer

Hey @mythmon,

You're kind of cheating! I'm fairly confident this extension won't work in Firefox Nightly, but hey, maybe you'll prove me wrong?

Let's focus on Google Chrome first, if you don't mind. ;) The behavor you're experincing sounds to me like we are having issue connecting to our 1Password servers. I have only seen this issue once and that was when I was playing with (also known as breaking) some of our code.

Do you mind giving me a few more details about your enviroment?

Are you on a corporate network, and if so, do you know if there's any kind of SSL inspection happening?

Can you also send me a copy of your Console log, before and after you attempt to sign in to your 1Password.com account.

Here's how you can view any logged output from the extension:

1. In Chrome, select the Window menu > Extensions.
2. Enable the Developer Mode checkbox at the top-right.
3. Click the background page link for the 1Password extension.
4. In the new Developer Tools window, click Console.

Here's an example of some errors that were output:

Please note some items may contain personal information like your email address, sign-in address, and account or item UIDs. If you would like to send us a complete copy of your console output, please email it to linux@1password.com.

Thanks for posting and I appreciate you taking the time to help us out.

--
Andrew Beyer (Ann Arbor, MI)
Lifeline @ AgileBits

mythmon

Thanks for the help @beyer. I've emailed a full copy of the log, but as a spoiler, I bet the problem is these lines:

background.js:1 GET /api/v2/auth/EMAIL@REDACTED/KEY/REDACT/ED
background.js:1 Refused to connect to 'https://khgocmkkpikpnmmkgmdnfckapcdkgfaf/api/v2/auth/EMAIL@REDACTED/KEY/REDACT/ED because it violates the following Content Security Policy directive: "connect-src https://*.1password.com wss://b5n.1password.com https://*.b5test.com wss://b5n.b5test.com https://*.b5dev.com wss://b5n.b5dev.com https://*.b5local.com:3000 wss://b5local.com:3001".

I am on a corporate network, but we don't have any SSL inspection going on, as far as I know.

I see similar CSP errors in Firefox as well, for what its worth. This is definitely cheating, but I've actually had a fair amount of success installing other Chrome extensions in Firefox. This is becoming increasing important as we get closer to Firefox 57 when legacy extensions stop working (which for Nightly happens about 12 weeks early, this Wednesday).

ajacocks

I am having the same problem, on Chrome 60.0.3112.78, on Fedora 26.

Refused to connect to 'https://khgocmkkpikpnmmkgmdnfckapcdkgfaf/api/v2/auth/**Personal details removed by AgileBits**' because it violates the following Content Security Policy directive: "connect-src https://*.1password.com wss://b5n.1password.com https://*.b5test.com wss://b5n.b5test.com https://*.b5dev.com wss://b5n.b5dev.com https://*.b5local.com:3000 wss://b5local.com:3001".

This is being received both on a home network, and on corporate WiFi.

• Alex

beyer

@mythmon and @ajacocks:

Thanks for sending over these errors. We had a slight bug in the way we were storing your account sign-in address.

Can you please try reinstalling 1Password for Chrome?

The quickest way (that I know of) is to right-click the 1Password logo and select "Remove from Chrome..." and then add 1Password back from the Chrome web store.

Please let us know if that works.

--
Andrew Beyer (Ann Arbor, MI)
Lifeline @ AgileBits

mythmon

I installed the extension again, and am seeing the same problem. I noticed that the Chrome web store still has the same version number, 0.8.2, and was last updated yesterday. Is that correct, or do I need to do something to force a new version?

beyer

@mythmon: 0.8.2 is indeed the latest version, I finally managed to reproduce this issue. It looks like we have a bug that is only affecting people who haven't used 1Password for Chrome previously. I'm digging into this now and I'll let you know when I get a fix.

ianmjones

@beyer Same problem here, similar messages as others.

I had removed the old 1Password Chrome extension (synced from macOS) before installing this new one.

beyer

@ianmjones / @mythmon / @ajacocks: Firstly, you guys rock! I needed to call in some backup, but we managed to find an issue in version 0.8.2 that was only affecting people who have never used 1Password for Chrome.

We just published version 0.8.3 which should resolve your issue adding your 1Password account. Please let me know if that works for you.

Updates should be automatic, but it might take a little bit of time. To force an update, in Chrome, select Window (from the menu bar) > Extensions and click the Update extensions now button.

Thanks!

--
Andrew Beyer (Ann Arbor, MI)
Lifeline @ AgileBits

mythmon

0.8.3 is working as far as I can tell in Chrome, thanks for the fix!

I'm running into a new problem in Firefox now though: Error: Permission denied to access property "capabilities". I know that you aren't targeting Firefox, I'm mostly leaving this here for anyone else trying to cheat the same way I am. I plan on digging in to this and seeing if I can get it working in Firefox, or at least figure out what's going on.

beyer

@mythmon: Although we are using many generic APIs (to allow us to port our code base to other browsers in the future), we do use Chrome specific APIs that will (very) likely cause issues when trying to run this extension in Firefox.

We certainly don't have anything against Firefox, but we definitely have our hands full. In fact, we just released a beta version of our native 1Password browser extension that supports WebExtensions.

I do greatly appreciate you letting me know our fix in v0.8.3 worked though! Have a great week!

--
Andrew Beyer (Ann Arbor, MI)
Lifeline @ AgileBits

ianmjones

@beyer 0.8.3 is working for me too, and looking awesome, thanks!

beyer

@ianmjones: Awesome! Welcome to the private beta – we're delighted you could join us. <3

Please don't hesitate to reach out if you run into any additional other issues. Have a great week!

--
Andrew Beyer (Ann Arbor, MI)
Lifeline @ AgileBits