Opened 21 months ago

Last modified 11 months ago

#18389 new defect

Support CAPTCHA-authorization

Reported by: WitnessofTruth Owned by:
Priority: Medium Milestone:
Component: Applications/Tor Messenger Version:
Severity: Normal Keywords:
Cc: tor@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

TOR messenger was perfectly fine yesterday. Now, when I try to log into the same account I was using yesterday, I am getting the error message: Error - Not authorized (did you enter the wrong password?) but I have checked and rechecked and it is the right password but I still get the same error message no matter how many times I try to log back into everything. Please help!

Child Tickets

Change History (19)

comment:1 Changed 21 months ago by sukhbir

Owner: set to sukhbir
Status: newassigned

Which protocol is this? XMPP?

comment:2 Changed 21 months ago by WitnessofTruth

The protocol is odnoklassniki

comment:3 in reply to:  1 Changed 21 months ago by WitnessofTruth

Replying to sukhbir:

Which protocol is this? XMPP?

The protocol is odnoklassniki

comment:4 Changed 21 months ago by arlolra

Have you been connecting to the server with TLS enabled? Is it possible your account credentials were compromised? Are there any errors in the error console?

comment:5 Changed 21 months ago by arlolra

Priority: ImmediateMedium
Severity: BlockerNormal

comment:6 Changed 21 months ago by arlolra

Also, if possible, go to Preferences > Config Editor, and set purple.debug.loglevel to 1 so that we see what stanza the server is returning.

It looks like there a few places where notAuthorized occurs in,
https://github.com/mozilla/releases-comm-central/blob/master/chat/protocols/xmpp/xmpp-session.jsm

comment:7 in reply to:  6 Changed 21 months ago by WitnessofTruth

Replying to arlolra:

Also, if possible, go to Preferences > Config Editor, and set purple.debug.loglevel to 1 so that we see what stanza the server is returning.

It looks like there a few places where notAuthorized occurs in,
https://github.com/mozilla/releases-comm-central/blob/master/chat/protocols/xmpp/xmpp-session.jsm

The account credentials have not been compromised. I have gone into the config editor as you have instructed and set the purple.debug.loglevel to 1. It continues to give me the "not authorized" when trying to log in. When I lookup the error log, I see many warnings and two errors. here are the errors:

Timestamp: 2/25/16, 8:48:15 AM
Error: TypeError: Components.classes@mozilla.org/updates/update-service;1 is undefined
Source File: chrome://instantbird/content/menus.js
Line: 71

Timestamp: 2/25/16, 8:48:16 AM
Error: TypeError: Components.classes@mozilla.org/updates/update-service;1 is undefined
Source File: chrome://instantbird/content/menus.js
Line: 71

comment:8 Changed 21 months ago by arlolra

Thanks for investigating. Those errors are #17648, not to worry.

We'll want to look at the warnings. Find the stanzas around the string "Not authorized".

comment:9 in reply to:  8 Changed 21 months ago by WitnessofTruth

Replying to arlolra:

Thanks for investigating. Those errors are #17648, not to worry.

We'll want to look at the warnings. Find the stanzas around the string "Not authorized".

Here is one I just found:
Timestamp: 2/25/16, 8:48:16 AM
Error: TypeError: Components.classes@mozilla.org/updates/update-service;1 is undefined
Source File: chrome://instantbird/content/menus.js
Line: 71

comment:10 Changed 21 months ago by arlolra

That's the same error as above. Please ignore it and focus on the warnings.

Specifically, look for the warning with the string "Not authorized", and the ones around it. Thanks.

comment:11 Changed 21 months ago by WitnessofTruth

Ok, here are a collection of the warnings:

Timestamp: 2/25/16, 10:06:44 AM
Warning: Connecting to: xmpp.odnoklassniki.ru:5222
Source File: resource:///modules/socket.jsm
Line: 148
Source Code:
prpl-odnoklassniki: Socket.connect

...

Timestamp: 2/25/16, 10:06:54 AM
Warning: received:
<failure xmlns="urn:ietf:params:xml:ns:xmpp-sasl">

<account-disabled xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/>
<text xmlns="urn:ietf:params:xml:ns:xmpp-sasl" xml:lang="en">

You need to use CAPTCHA-supported authorization to login with specified username from current locaion. Please, use agents with CAPTCHA-authorization support, like Mail.Ru Agent, ICQ or Odnoklassniki client.

</text>
<text xmlns="urn:ietf:params:xml:ns:xmpp-sasl" xml:lang="ru">

Для входа указанным пользователем из текущего места требуется использование авторизации с поддержкой ввода капчи (CAPTCHA). Пожалуйста, используйте клиенты с поддержкой CAPTCHA-авторизации, такие как Mail.Ru Agent, ICQ или мобильный клиент Одноклассников

</text>
<text xmlns="urn:ietf:params:xml:ns:xmpp-sasl" xml:lang="x-code">

bot-check-required

</text>

</failure>

Last edited 21 months ago by arlolra (previous) (diff)

comment:12 Changed 21 months ago by arlolra

Aha! They think you're a bot bot-check-required.

You need to use CAPTCHA-supported authorization to login with specified username from current location. Please, use agents with CAPTCHA-authorization support, like Mail.Ru Agent, ICQ or Odnoklassniki client.

I'll look into whether that's supported.

comment:13 Changed 21 months ago by arlolra

We'll probably need to implement this similar to #12097

comment:14 in reply to:  13 Changed 21 months ago by WitnessofTruth

Replying to arlolra:

We'll probably need to implement this similar to #12097

ok, let me know what must be done to resolve this.

comment:15 Changed 21 months ago by arlolra

We're going to have to write some code and release a new version. It's going to be some time.

Does it prompt you with a captcha when you login to your account at ok.ru when using Tor Browser? I don't have any experience with Tor and Odnoklassniki, but maybe if you do that it'll stop prompting you in Tor Messenger.

comment:16 Changed 21 months ago by arlolra

Summary: Getting "error - not authorized" when trying to access TOR messengerSupport CAPTCHA-authorization

comment:17 Changed 19 months ago by clokep

Cc: tor@… added

comment:18 Changed 11 months ago by arlolra

Owner: sukhbir deleted

comment:19 Changed 11 months ago by arlolra

Status: assignednew
Note: See TracTickets for help on using tickets.