{"action":"created","issue":{"url":"https://api.github.com/repos/mozilla/fxa-auth-server/issues/1562","repository_url":"https://api.github.com/repos/mozilla/fxa-auth-server","labels_url":"https://api.github.com/repos/mozilla/fxa-auth-server/issues/1562/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/fxa-auth-server/issues/1562/comments","events_url":"https://api.github.com/repos/mozilla/fxa-auth-server/issues/1562/events","html_url":"https://github.com/mozilla/fxa-auth-server/issues/1562","id":190913343,"number":1562,"title":"Unblock Code Not Always Working","user":{"login":"davismtl","id":19537086,"avatar_url":"https://avatars.githubusercontent.com/u/19537086?v=3","gravatar_id":"","url":"https://api.github.com/users/davismtl","html_url":"https://github.com/davismtl","followers_url":"https://api.github.com/users/davismtl/followers","following_url":"https://api.github.com/users/davismtl/following{/other_user}","gists_url":"https://api.github.com/users/davismtl/gists{/gist_id}","starred_url":"https://api.github.com/users/davismtl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davismtl/subscriptions","organizations_url":"https://api.github.com/users/davismtl/orgs","repos_url":"https://api.github.com/users/davismtl/repos","events_url":"https://api.github.com/users/davismtl/events{/privacy}","received_events_url":"https://api.github.com/users/davismtl/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"seanmonstar","id":51479,"avatar_url":"https://avatars.githubusercontent.com/u/51479?v=3","gravatar_id":"","url":"https://api.github.com/users/seanmonstar","html_url":"https://github.com/seanmonstar","followers_url":"https://api.github.com/users/seanmonstar/followers","following_url":"https://api.github.com/users/seanmonstar/following{/other_user}","gists_url":"https://api.github.com/users/seanmonstar/gists{/gist_id}","starred_url":"https://api.github.com/users/seanmonstar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/seanmonstar/subscriptions","organizations_url":"https://api.github.com/users/seanmonstar/orgs","repos_url":"https://api.github.com/users/seanmonstar/repos","events_url":"https://api.github.com/users/seanmonstar/events{/privacy}","received_events_url":"https://api.github.com/users/seanmonstar/received_events","type":"User","site_admin":false},"assignees":[{"login":"seanmonstar","id":51479,"avatar_url":"https://avatars.githubusercontent.com/u/51479?v=3","gravatar_id":"","url":"https://api.github.com/users/seanmonstar","html_url":"https://github.com/seanmonstar","followers_url":"https://api.github.com/users/seanmonstar/followers","following_url":"https://api.github.com/users/seanmonstar/following{/other_user}","gists_url":"https://api.github.com/users/seanmonstar/gists{/gist_id}","starred_url":"https://api.github.com/users/seanmonstar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/seanmonstar/subscriptions","organizations_url":"https://api.github.com/users/seanmonstar/orgs","repos_url":"https://api.github.com/users/seanmonstar/repos","events_url":"https://api.github.com/users/seanmonstar/events{/privacy}","received_events_url":"https://api.github.com/users/seanmonstar/received_events","type":"User","site_admin":false}],"milestone":null,"comments":17,"created_at":"2016-11-22T05:50:26Z","updated_at":"2016-11-28T03:46:33Z","closed_at":null,"body":"There have been various reports that the unblock code isn't working. This warrants investigations. Here are the 3 I heard of today:\n\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=1317731\n\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=1318649\n\nAlso mentioned in the comments of this Facebook post: \nhttps://www.facebook.com/Firefox/posts/10157770892500022"},"comment":{"url":"https://api.github.com/repos/mozilla/fxa-auth-server/issues/comments/263177463","html_url":"https://github.com/mozilla/fxa-auth-server/issues/1562#issuecomment-263177463","issue_url":"https://api.github.com/repos/mozilla/fxa-auth-server/issues/1562","id":263177463,"user":{"login":"rfk","id":34695,"avatar_url":"https://avatars.githubusercontent.com/u/34695?v=3","gravatar_id":"","url":"https://api.github.com/users/rfk","html_url":"https://github.com/rfk","followers_url":"https://api.github.com/users/rfk/followers","following_url":"https://api.github.com/users/rfk/following{/other_user}","gists_url":"https://api.github.com/users/rfk/gists{/gist_id}","starred_url":"https://api.github.com/users/rfk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rfk/subscriptions","organizations_url":"https://api.github.com/users/rfk/orgs","repos_url":"https://api.github.com/users/rfk/repos","events_url":"https://api.github.com/users/rfk/events{/privacy}","received_events_url":"https://api.github.com/users/rfk/received_events","type":"User","site_admin":false},"created_at":"2016-11-28T03:46:33Z","updated_at":"2016-11-28T03:46:33Z","body":"Here's another flow that doesn't seem to make sense:\r\n\r\n```\r\n         0 | 9271a78 | flow.signin.begin\r\n      1250 | 9271a78 | flow.signin.engage\r\n      3170 | 9271a78 | flow.signin.submit\r\n      3940 | 9271a78 | customs.blocked\r\n      3941 | 9271a78 | account.login.blocked\r\n      4486 | 9271a78 | account.login.sentUnblockCode\r\n     94482 | 9271a78 | flow.signin-unblock.engage\r\n     95748 | 9271a78 | flow.signin.submit\r\n     95749 | 9271a78 | customs.blocked\r\n     95749 | 9271a78 | account.login.blocked\r\n     95767 | 9271a78 | account.login.confirmedUnblockCode\r\n     96000 | 9271a78 | customs.blocked\r\n     96000 | 9271a78 | account.login.blocked\r\n     96013 | 9271a78 | account.login.invalidUnblockCode\r\n    122697 | 9271a78 | flow.signin.submit\r\n    122765 | 9271a78 | customs.blocked\r\n    122765 | 9271a78 | account.login.blocked\r\n    122775 | 9271a78 | account.login.invalidUnblockCode\r\n    134044 | 9271a78 | account.login.sentUnblockCode\r\n    169395 | 9271a78 | flow.signin.submit\r\n    169466 | 9271a78 | customs.blocked\r\n    169466 | 9271a78 | account.login.blocked\r\n    169481 | 9271a78 | account.login.confirmedUnblockCode\r\n    169712 | 9271a78 | customs.blocked\r\n    169712 | 9271a78 | account.login.blocked\r\n    169722 | 9271a78 | account.login.invalidUnblockCode\r\n```\r\n\r\nThis contains four `flow.signin.submit` events, two \"confirmedUnblockCode\" events, and three \"invalidUnblockCode\" events.  Why are there five \"*UnblockCode\" events for only four submit events?\r\n\r\nCould we be accidentally consuming the valid code no a login attempt that fails, then re-trying a second login attempt with the same code?"}}
{"actor":{"display_login":"rfk"}}