Atlassian cloud login infinite loop

Question

On firefox 68.0.1 I'm stuck in a redirect loop while trying to login to atlassian. Even in safe mode it does not work

I've even tried disabling first party isolation and resist finger printing and it worked randomly but then stopped again. I have all the regular privacy settings on but on not sure why it's breaking and it shouldn't be breaking anyway

Andy Heinzer · Answer

Hi @[deleted],

Technically we do not support these beta or dev versions of browsers.  Please see our Supported browsers page.  It indicates that for Firefox we only support the "Latest stable version supported".  As for today that is 74.0.

Sending a HAR over Community is not an ideal solution, as I have learned since posting that message, as there is the potential for your cookie to be compromised in the process.

I am going to lock this thread because I fear the information here is old and outdated.  In the future, please create a new question instead.  I am afraid that both our login site and the browser version/features have changed so much since this original post was created that I fear much of the suggested information is outdated now.

Thanks

Andy

unknown · Answer

Hello Andy_Heinzer, I have the same issue.
I have been trying to sign-in in my Jira account after registration and here we are with redirect loop. 
I have Mozilla Firefox Browser (Dev. edition) 75 and I have checked network.http.sendRefererHeader and its value set to 2.
Where I can share HAR file?

And from Chrome Browser all works great.

Andy Heinzer · Answer

Hi Mikkel,

Sorry to hear about this problem.   However I have been having trouble trying to reproduce this problem.  I'd be interested to learn more about the configuration of your firefox.  Specifically if you can go into your about:config and let us know what value you have for your network.http.sendRefererHeader entry.

By default the browser has a value here of 2, which according to http://kb.mozillazine.org/Network.http.sendRefererHeader

Send the Referer header when clicking on a link or loading an image, and set document.referrer for the following page. (Default)

We have seen at least one case where setting this to value of 0 can prevent authentication due to a CORS error.  Which in turn could cause an infinite login failure loop.

If that value is already at 2, I'd be interested to see if we can generate a HAR file that would let us see the attempted requests of the browser and see if we can determine from there why this might be failing in your environment.

Regards,

Andy