Opened 17 months ago

Last modified 7 months ago

#18389 new defect

Support CAPTCHA-authorization

Reported by: WitnessofTruth Owned by:
Priority: Medium Milestone:
Component: Applications/Tor Messenger Version:
Severity: Normal Keywords:
Cc: tor@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

TOR messenger was perfectly fine yesterday. Now, when I try to log into the same account I was using yesterday, I am getting the error message: Error - Not authorized (did you enter the wrong password?) but I have checked and rechecked and it is the right password but I still get the same error message no matter how many times I try to log back into everything. Please help!

Child Tickets

Change History (19)

comment:1 follow-up: Changed 17 months ago by sukhbir

  • Owner set to sukhbir
  • Status changed from new to assigned

Which protocol is this? XMPP?

comment:2 Changed 17 months ago by WitnessofTruth

The protocol is odnoklassniki

comment:3 in reply to: ↑ 1 Changed 17 months ago by WitnessofTruth

Replying to sukhbir:

Which protocol is this? XMPP?

The protocol is odnoklassniki

comment:4 Changed 17 months ago by arlolra

Have you been connecting to the server with TLS enabled? Is it possible your account credentials were compromised? Are there any errors in the error console?

comment:5 Changed 17 months ago by arlolra

  • Priority changed from Immediate to Medium
  • Severity changed from Blocker to Normal

comment:6 follow-up: Changed 17 months ago by arlolra

Also, if possible, go to Preferences > Config Editor, and set purple.debug.loglevel to 1 so that we see what stanza the server is returning.

It looks like there a few places where notAuthorized occurs in,
https://github.com/mozilla/releases-comm-central/blob/master/chat/protocols/xmpp/xmpp-session.jsm

comment:7 in reply to: ↑ 6 Changed 17 months ago by WitnessofTruth

Replying to arlolra:

Also, if possible, go to Preferences > Config Editor, and set purple.debug.loglevel to 1 so that we see what stanza the server is returning.

It looks like there a few places where notAuthorized occurs in,
https://github.com/mozilla/releases-comm-central/blob/master/chat/protocols/xmpp/xmpp-session.jsm

The account credentials have not been compromised. I have gone into the config editor as you have instructed and set the purple.debug.loglevel to 1. It continues to give me the "not authorized" when trying to log in. When I lookup the error log, I see many warnings and two errors. here are the errors:

Timestamp: 2/25/16, 8:48:15 AM
Error: TypeError: Components.classes@mozilla.org/updates/update-service;1 is undefined
Source File: chrome://instantbird/content/menus.js
Line: 71

Timestamp: 2/25/16, 8:48:16 AM
Error: TypeError: Components.classes@mozilla.org/updates/update-service;1 is undefined
Source File: chrome://instantbird/content/menus.js
Line: 71

comment:8 follow-up: Changed 17 months ago by arlolra

Thanks for investigating. Those errors are #17648, not to worry.

We'll want to look at the warnings. Find the stanzas around the string "Not authorized".

comment:9 in reply to: ↑ 8 Changed 17 months ago by WitnessofTruth

Replying to arlolra:

Thanks for investigating. Those errors are #17648, not to worry.

We'll want to look at the warnings. Find the stanzas around the string "Not authorized".

Here is one I just found:
Timestamp: 2/25/16, 8:48:16 AM
Error: TypeError: Components.classes@mozilla.org/updates/update-service;1 is undefined
Source File: chrome://instantbird/content/menus.js
Line: 71

comment:10 Changed 17 months ago by arlolra

That's the same error as above. Please ignore it and focus on the warnings.

Specifically, look for the warning with the string "Not authorized", and the ones around it. Thanks.

comment:11 Changed 17 months ago by WitnessofTruth

Ok, here are a collection of the warnings:

Timestamp: 2/25/16, 10:06:44 AM
Warning: Connecting to: xmpp.odnoklassniki.ru:5222
Source File: resource:///modules/socket.jsm
Line: 148
Source Code:
prpl-odnoklassniki: Socket.connect

...

Timestamp: 2/25/16, 10:06:54 AM
Warning: received:
<failure xmlns="urn:ietf:params:xml:ns:xmpp-sasl">

<account-disabled xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/>
<text xmlns="urn:ietf:params:xml:ns:xmpp-sasl" xml:lang="en">

You need to use CAPTCHA-supported authorization to login with specified username from current locaion. Please, use agents with CAPTCHA-authorization support, like Mail.Ru Agent, ICQ or Odnoklassniki client.

</text>
<text xmlns="urn:ietf:params:xml:ns:xmpp-sasl" xml:lang="ru">

Для входа указанным пользователем из текущего места требуется использование авторизации с поддержкой ввода капчи (CAPTCHA). Пожалуйста, используйте клиенты с поддержкой CAPTCHA-авторизации, такие как Mail.Ru Agent, ICQ или мобильный клиент Одноклассников

</text>
<text xmlns="urn:ietf:params:xml:ns:xmpp-sasl" xml:lang="x-code">

bot-check-required

</text>

</failure>

Last edited 17 months ago by arlolra (previous) (diff)

comment:12 Changed 17 months ago by arlolra

Aha! They think you're a bot bot-check-required.

You need to use CAPTCHA-supported authorization to login with specified username from current location. Please, use agents with CAPTCHA-authorization support, like Mail.Ru Agent, ICQ or Odnoklassniki client.

I'll look into whether that's supported.

comment:13 follow-up: Changed 17 months ago by arlolra

We'll probably need to implement this similar to #12097

comment:14 in reply to: ↑ 13 Changed 17 months ago by WitnessofTruth

Replying to arlolra:

We'll probably need to implement this similar to #12097

ok, let me know what must be done to resolve this.

comment:15 Changed 17 months ago by arlolra

We're going to have to write some code and release a new version. It's going to be some time.

Does it prompt you with a captcha when you login to your account at ok.ru when using Tor Browser? I don't have any experience with Tor and Odnoklassniki, but maybe if you do that it'll stop prompting you in Tor Messenger.

comment:16 Changed 17 months ago by arlolra

  • Summary changed from Getting "error - not authorized" when trying to access TOR messenger to Support CAPTCHA-authorization

comment:17 Changed 15 months ago by clokep

  • Cc tor@… added

comment:18 Changed 7 months ago by arlolra

  • Owner sukhbir deleted

comment:19 Changed 7 months ago by arlolra

  • Status changed from assigned to new
Note: See TracTickets for help on using tickets.