[Bug 1605218] Re: Google account login using 2FA isn’t remembered across sessions

2016-07-21 Thread Chris Coulson
The only time the browser should restore session cookies is after a crash or some other abnormal shutdown. Restoring should never be the default as it turns session cookies in to permanent cookies - they will never expire, as they don't have an expiration date. -- You received this bug notificati

[Bug 1605218] Re: Google account login using 2FA isn’t remembered across sessions

2016-07-21 Thread Olivier Tilloy
Re-opening as our browser by default continues where the user left off (it restores all open tabs). So we should probably set the cookie mode to restored in the default case, and set it to ephemeral when the user launches the browser with the --new-session command-line flag. ** Changed in: webbrow

[Bug 1605218] Re: Google account login using 2FA isn’t remembered across sessions

2016-07-21 Thread David Barth
To confirm, you can use a guest session, and re-do the test here. You will not be logged in automatically after a browser restart, due to the use of session cookies by the Google Account service. As pointed out by mardy, the behavior observed in the bug report is due to a chrome feature called "co

[Bug 1605218] Re: Google account login using 2FA isn’t remembered across sessions

2016-07-21 Thread Olli Ries
I can confirm that Chrome does not show that behavior, i.e. it does let me login without having to enter the credentials again. Chromium however does show the behavior described in comment #1. However, webbrowser-app does require the userid (email) entered again before letting you log in. -- Yo

[Bug 1605218] Re: Google account login using 2FA isn’t remembered across sessions

2016-07-21 Thread Alberto Mardegan
As David wrote, this behaviour is due to the fact that Google corporate accounts store their session in session cookies, which are normally cleared when the browser is closed. Now, when using Chromium in the desktop, session cookies are restored, if the user has chosen that on startup the last se

[Bug 1605218] Re: Google account login using 2FA isn’t remembered across sessions

2016-07-21 Thread David Barth
** Changed in: webbrowser-app (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1605218 Title: Google account login using 2FA isn’t remembered across sessions To

[Bug 1605218] Re: Google account login using 2FA isn’t remembered across sessions

2016-07-21 Thread David Barth
I think this is really a Google feature, not a bug. >From what we observed, corporate / 2fa accounts userids are stored as /session cookies/ and thus only survive for the lifetime of a browser session. We think this is on purpose, to force an userid confirmation "every morning" or so, as defined b