FediAct icon indicating copy to clipboard operation
FediAct copied to clipboard

FediAct breaks common credit union banking software

Open tedivm opened this issue 2 years ago • 1 comments

For some reason this extension breaks all usage of the Alkami software, which is used by tons of banks and credit unions. For some reason after login it redirects people to api/v1/instance despite Alkami not existing. I don't know why it redirects to that endpoint either, as that just seems weird.

tedivm avatar Jan 17 '23 18:01 tedivm

From what I can see more than just Alkami software is affected. The login on login.ionos.de, also breaks.

My assumption is that the extra request on every load of any page breaks the login flow on the server side.

With some tinkering and "remembering" if a website is a mastodon instance or not this could be avoided and we could save unneeded requests to actual instances too.

https://github.com/Lartsch/FediAct/blob/75cd8bb25a50fa75195e46a9409c9bd7cb2e96e7/src/inject.js#L1501-L1507

As a temporary workaround, add the EXACT domain (so for my example "login.ionos.de") to the blacklist.

Pokefan5 avatar Jan 19 '23 01:01 Pokefan5