Empty JSON when linking PAUSE account

[telatin]

I finally managed to receive emails via [email protected], and tried to link my MetaCPAN account (made with GitHub OAuth) to PAUSE.

I received the e-mail but when clicking the activation link I got an empty JSON, both from Firefox and Chrome (using MacOS).

I see there have been other reports, but some issues are closed and others not totally on-topic, sorry if I missed the good place. (e.g. issue 2048 main topic relates to email not arriving, but then an answer includes "The issue with the empty JSON has been hard to consistently reproduce, which is why it hasn't yet been fixed.")...

My PAUSE id is PROCH

[oalders]

Thanks @telatin. The issue seems to be around cookies not being set consistently by the front end before they are read by the back end. I started some work to fix this at the Perl Toolchain Summit, but I need to get back to it. We will leave this issue open until it's fixed. Thanks for reporting.

[telatin]

Thanks for the feedback.

I previously tried from macOS 10.13 with Firefox/Chrome. Today I tried from Windows 10 with Firefox and Edge (!), and from a Ubuntu VM with Firefox. The answer has always been '{}'.

➡️ I was doing a further attempt (Win10/Chrome) and this time I found PAUSE linked! Unfortunately I'm not sure which attempt has been successful...

[Tux]

Same here: Opera-developer on openSUSE Leap 15.0

[KaiSchwarz-cnic]

Same here: Chrome v76.0.3809.132 x64 PAUSE ID: hexonet

fyi: I opened the link in incognito mode of chrome -> worked there.

/update: but still in interface it shows PAUSE to be not linked.

[dkechag]

Same here on a MacOS Mojave with Chrome, Mozilla, Safari. Even tried on an XP VM. The only different behavior I get is with Mozilla private mode when I get the response:

{
   "id" : "AW4SAMAEyboIZjsbsuYT",
   "looks_human" : true,
   "identity" : [
      {
         "extra" : {},
         "key" : "DKECHAG",
         "name" : "pause"
      }
   ],
   "access_token" : []
}

But it still doesn't actually help with my account linking.

[spajai]

I am facing the same problem. After clicking on the verification link sent empty json.

[tehmoth]

Logged into pause I get the empty JSON, incognito mode get the full JSON response above, but didn't help with linking.

Anyone having any success with this?

[pmqs]

Same problem here.

[RogueScholar]

Same problem here as well.

Browsers used: Chrome 89.04389.23, Vivaldi 3.6.2165.32, Opera 74.0.3911.63 OS: Kubuntu 20.10 "The Groovy Gorilla" (x86_64), kernel 5.8.0-41.46, KDE Plasma 5.20.90, KDE Frameworks 5.79.0, Qt 5.15.2

[ylavoie]

Same problem here.

[oalders]

I know this sounds terrible, but if you delete your cookies and try again do you get the same result?

[pmqs]

I know this sounds terrible, but if you delete your cookies and try again do you get the same result?

Yes, same result when cookies are wiped.

[bombsimon]

I have the same issue. I get the email linked to my cpan.org address but clicking the response just gives me an empty JSON response. Sometimes using old links (tried multiple times) gives me the same result as https://github.com/metacpan/metacpan-web/issues/2192#issuecomment-546972216. Tried clearing cache/linking in incognito.

Don't think it's related but also having the same issue as #2322 (also with cleared cache/incognito) so there's another kind of linking not working.

Browser: Version 89.0.4389.90 (Official Build) (64-bit) OS: Windows 10 Version 1909 (Build 18363.1379) (Same issue with macOS 11.1 Big Sur and Manjaro 20.2, both using Chrome).

[bombsimon]

I was going to try this again today from a new machine and something odd happened. I must have been signed in to MetaCPAN since I could access the Connect button for PAUSE. Note that this is a new machine from which I did not create my MetaCPAN account or authorized GitHub, however I was signed in and GitHub.

Anyhow, after following the link from the new email on this machine, my PAUSE account (SAWERT) got linked! I could access my Profile tab and saw my account details. However, now my GitHub account was no longer linked so it was like I had disconnected that account somehow. Since I wanted to link that as well I tried to do so but now I couldn't link my GitHub account. I then signed out of MetaCPAN to sign back in and realised that I have no other option than to do this with GitHub. I signed in with my GitHub account which is already authorized (even if it wasn't linked after linking PAUSE) and now I'm back in but without a linked PAUSE account and now I can't link it again.

It's like my third party accounts are linked to different entries in your user storage. I never disconnected the PAUSE account so it should be linked somewhere maybe? Not sure how to reproduce this but it must have been a combination of cookies, switching computers, signing in with GitHub.

Browser: Chrome Version 88.0.4324.182 (Official Build) (64-bit) OS: Linux 5.9.16-1-MANJARO 20.2.1

[oalders]

That sounds like this issue: https://metacpan.org/about/faq#connectingoneidentitydisconnectsanother

To be honest, I'd like to have the whole authentication system gutted and replaced with something that doesn't do this wacky stuff. It's really hard to replicate and this has been going on for years. We did start on this at the last meta::hack, but it wasn't simple enough to get done over the 4 days that we had.