Can't login with Firefox 94.0: "Bad Request - Bad bot, go away! Request aborted."

[Alex DeLorenzo]

I'm on Impish, and I'm using firefox 94.0+build3-0ubuntu0.21.10.1 from the impish-updates repository.

I can't login to launchpad.net without triggering a "Bad Request - Bad bot, go away! Request aborted." error. I had to login using Chromium to make this report.

This bug might be related to a similar bug that was resolved in 2015: https://bugs.launchpad.net/bugs/1474841

[Colin Watson (cjwatson)]

I've filed https://bugzilla.mozilla.org/show_bug.cgi?id=1739992, since this appears to be a Firefox regression.

[Chris Guiver (guiverc)]

I tried to file bug report on latest jammy daily (canary build) due to failure to install & this error is all I got after clicking "Yes, log me in" page (where I see my name etc)

- hp dc7700 (c2d-e6320, 5gb, nvidia quadro nvs 290)

also mentioned here - https://discourse.ubuntu.com/t/new-desktop-installer-preview-build/24765/35

It's not impacting all boxes though it seems; I booted the thumb-drive (current daily) on another box

- sony vaio svp112a1cw (i5-9400u, 4gb, intel haswell-ULT)

and i DID NOT experience this issue there??? (sony box is wifi only and I manually connected to hidden wpa2 access point prior to bug submission)

however my install failed there too on that box & i was asked to file bug report on canary-installer crash... but now I get

Bad bot, go away! Request aborted.

[Leó Kolbeinsson (leok)]

I also received this error - my workaround was to delete the saved password for launchpad in Firfeox and then I could login - after several logins the error came again.

[Leó Kolbeinsson (leok)]

Re: the "bad bot,go away! etc " error - I only get this when trying to login to launchpad bug reports.
I can login as normal to the QA testing site with no problems.

[Alexandre Erwin Ittner (aittner)]

Same behavior here. Authentication to LP fails with latest FF 94 on both focal and bionic, but works for everything else (confirmed working with GApps, Mattermost, ISO QA, Discourse, Snapcraft.io, Charmhub.io, and HR portal).

My simplest workaround is using it from a private window; I suppose the extended privacy controls disables the feature that triggers the bug, but I haven't looked which one specifically.

[Daniel Manrique (roadmr)]

A workaround you can also try is removing your password manager record for Launchpad, which should clear the incorrectly-filled field, and then try logging in again to create a new record (please write your password down before removing the record!).

Another option is to go into the password manager and clear any auto-filled values for openid.usernamesecret (which is the bot detection field which should be left blank).

[Colin Watson (cjwatson)]

Mozilla have updated their site recipes for form autofilling, so I think this should work properly now - it certainly does in my tests.

[Chris Guiver (guiverc)]

If this is fixed; I'd not expect to experience this on a daily ISO QA test using 2021-11-16 (jammy canary desktop ISO)

I just did. :(

[Ubuntu QA Website (ubuntuqa)]

This bug has been reported on the Ubuntu ISO testing tracker.

A list of all reports related to this bug can be found here:
http://iso.qa.ubuntu.com/qatracker/reports/bugs/1950073

[Colin Watson (cjwatson)]

@guiverc It might then be worth seeing if you can narrow this down in the sort of way seen in https://bugzilla.mozilla.org/show_bug.cgi?id=1739992 and update the upstream bug accordingly.

I don't know how the site recipe mechanism works; it's possible that there's something which is fetched from the network if possible but falls back to a local copy if that fails, in which case the fix might not be entirely robust until the next Firefox release.

[Chris Guiver (guiverc)]

Failure again using jammy (canary) ISO 2021-11-17
making comment on upstream report.

[Chris Guiver (guiverc)]

I just got this error on a Xubuntu daily (jammy) QA-test install that failed... "Bad bot, go away! Request aborted"

 There are NO snaps installs in Xubuntu.

`apt-cache policy firefox` shows

firefox:
  Installed: 94.0+build3-0ubuntu1

(note: I didn't copy/paste that; I'm on my primary lubuntu box but the results loook identical to my primary jammy box)

[Colin Watson (cjwatson)]

As far as I know snaps are irrelevant to this; nobody else seems to have brought them up here before you.

I don't know exactly how Mozilla's (apparent) out-of-band mechanism for updating per-site form autofill behaviour works, or how it might fail.

[Leó Kolbeinsson (leok)]

I just tested Xubuntu daily (jammy) QA-test 18-11-2021 which failed - I had no problem logging onto launchpad - hence unable to reproduce this error.

[Bernard Stafford (bernard010)]

I deleted my saved passwords for Ubuntu One.
Uncheck the box in Firefox 'Delete cookies on exit'
Manually login do not save password.
Each site on Launchpad I go with the logged in cookies.
I am logged in as soon as it opens. I delete the cookies weekly.
I did notice that Firefox auto log turns the boxes yellow when auto-filling info.

[Bernard Stafford (bernard010)]

Installed Firefox 78.13.0esr Saved password to auto-login.
Logged out of Launchpad. Used auto-login.
Everything works as expected.
This could be a "Work-Around" until bug report is fixed.

[Bernard Stafford (bernard010)]

The fix released works.
Thank You...