Skip to content

Only add referrer param to login url if referrer is a GET request #32891

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

mfickers
Copy link
Contributor

Description (*)

This fixes a bug where, after an unsuccessful login attempt, the URL /customer/account/loginPost was added as referrer param to the login URL on redirect.
A second, successful login attempt would then redirect the user to this URL, displaying a 404 page because the route only handles POST requests.

This is fixed by checking if the current request is a GET request before adding the URL as referrer parameter.

Fixed Issues (if relevant)

  1. Fixes Login on second attempt after one unsuccessful try redirects customer to 404 page #32885

Manual testing scenarios (*)

  1. Visit /customer/account/login without a referrer parameter in the URL
  2. Make an unsuccessful login attempt
  3. There should be no referrer parameter added to the URL after redirect

Questions or comments

This does not break the general referrer functionality. I've made sure that e.g. the redirect after login when adding an item to the wishlist still works as expected.

Contribution checklist (*)

  • Pull request has a meaningful description of its purpose
  • All commits are accompanied by meaningful commit messages
  • All new or changed code is covered with unit/integration tests (if applicable)
  • README.md files for modified modules are updated and included in the pull request if any README.md predefined sections require an update
  • All automated tests passed successfully (all builds are green)

@m2-assistant
Copy link

m2-assistant bot commented Apr 28, 2021

Hi @mfickers. Thank you for your contribution
Here are some useful tips how you can test your changes using Magento test environment.
Add the comment under your pull request to deploy test or vanilla Magento instance:

  • @magento give me test instance - deploy test instance based on PR changes
  • @magento give me 2.4-develop instance - deploy vanilla Magento instance

❗ Automated tests can be triggered manually with an appropriate comment:

  • @magento run all tests - run or re-run all required tests against the PR changes
  • @magento run <test-build(s)> - run or re-run specific test build(s)
    For example: @magento run Unit Tests

<test-build(s)> is a comma-separated list of build names. Allowed build names are:

  1. Database Compare
  2. Functional Tests CE
  3. Functional Tests EE,
  4. Functional Tests B2B
  5. Integration Tests
  6. Magento Health Index
  7. Sample Data Tests CE
  8. Sample Data Tests EE
  9. Sample Data Tests B2B
  10. Static Tests
  11. Unit Tests
  12. WebAPI Tests
  13. Semantic Version Checker

You can find more information about the builds here

ℹ️ Please run only needed test builds instead of all when developing. Please run all test builds before sending your PR for review.

For more details, please, review the Magento Contributor Guide documentation.

⚠️ According to the Magento Contribution requirements, all Pull Requests must go through the Community Contributions Triage process. Community Contributions Triage is a public meeting.

🕙 You can find the schedule on the Magento Community Calendar page.

📞 The triage of Pull Requests happens in the queue order. If you want to speed up the delivery of your contribution, please join the Community Contributions Triage session to discuss the appropriate ticket.

🎥 You can find the recording of the previous Community Contributions Triage on the Magento Youtube Channel

✏️ Feel free to post questions/proposals/feedback related to the Community Contributions Triage process to the corresponding Slack Channel

@mrtuvn
Copy link
Contributor

mrtuvn commented Apr 28, 2021

@magento run all tests

@mrtuvn
Copy link
Contributor

mrtuvn commented Apr 28, 2021

Can you cover this changes with some kind of automation tests

@mrtuvn mrtuvn added the Auto-Tests: Not Covered Changes in Pull Request requires coverage by auto-tests label Apr 28, 2021
@mfickers
Copy link
Contributor Author

@mrtuvn I've added an integration test to make sure there is no referer parameter on an unsuccessful login attempt.

@mfickers
Copy link
Contributor Author

@magento run all tests

@mrtuvn
Copy link
Contributor

mrtuvn commented Apr 28, 2021

@magento run Functional Tests B2B

@magento-automated-testing
Copy link

The requested builds are added to the queue. You should be able to see them here within a few minutes. Please re-request them if they don't show in a reasonable amount of time.

@mrtuvn
Copy link
Contributor

mrtuvn commented Apr 29, 2021

@magento run Functional Tests B2B

@magento-automated-testing
Copy link

The requested builds are added to the queue. You should be able to see them here within a few minutes. Please re-request them if they don't show in a reasonable amount of time.

@mrtuvn mrtuvn added Auto-Tests: Covered All changes in Pull Request is covered by auto-tests and removed Auto-Tests: Not Covered Changes in Pull Request requires coverage by auto-tests labels Apr 29, 2021
@mrtuvn
Copy link
Contributor

mrtuvn commented Apr 29, 2021

Seem fail tests not related with your changes

@mrtuvn mrtuvn self-requested a review April 29, 2021 04:19
Copy link
Contributor

@mrtuvn mrtuvn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes seem ok with me

@magento-engcom-team
Copy link
Contributor

Hi @mrtuvn, thank you for the review.
ENGCOM-9057 has been created to process this Pull Request

@mrtuvn mrtuvn requested a review from zakdma April 29, 2021 04:25
@dmitriyprime dmitriyprime self-assigned this Apr 29, 2021
@dmitriyprime
Copy link
Contributor

✔️ QA passed

Before:
before

✔️ After:
after

@m2-assistant
Copy link

m2-assistant bot commented Aug 20, 2021

Hi @mfickers, thank you for your contribution!
Please, complete Contribution Survey, it will take less than a minute.
Your feedback will help us to improve contribution process.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Auto-Tests: Covered All changes in Pull Request is covered by auto-tests Award: bug fix Award: test coverage Component: Customer Partner: Basecom partners-contribution Pull Request is created by Magento Partner Priority: P2 A defect with this priority could have functionality issues which are not to expectations. Progress: accept QA: Added to Regression Scope Scenario was analysed and added to Regression Testing Scope Release Line: 2.4
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Login on second attempt after one unsuccessful try redirects customer to 404 page
4 participants