As David wrote, this behaviour is due to the fact that Google corporate
accounts store their session in session cookies, which are normally
cleared when the browser is closed.

Now, when using Chromium in the desktop, session cookies are restored, if the 
user has chosen that on startup the last session should be shown; in all other 
cases, they are cleared.
Reference:
http://stackoverflow.com/questions/10617954/chrome-doesnt-delete-session-cookies
https://bugs.chromium.org/p/chromium/issues/detail?id=128513

In our GMail (and other Google-affiliated) webapp we set the cookie mode
to "restored", in order to preserve the authenticated session between
restarts. That's the obvious right thing to do in a webapp.

For webbrowser-app, the behaviour is a bit more questionable, but given
that webbrowser app usually starts with showing the last page the user
visited, and keeps all tabs active, I would guess that the most natural
behaviour would be to remember session cookies, in the same way that
Chromium does when it's restoring the last visited tabs.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu.
https://bugs.launchpad.net/bugs/1605218

Title:
  Google account login using 2FA isn’t remembered across sessions

Status in webbrowser-app package in Ubuntu:
  Invalid

Bug description:
  This has been reliably reproduced on desktop and a phone running
  webbrowser-app 0.23+16.04.20160711-0ubuntu1 (and oxide
  1.15.8-0ubuntu0.16.04.1).

  Steps to reproduce:
  1) wipe your session data (make a backup first if you care) by removing 
~/.local/share/webbrowser-app/
  2) launch webbrowser-app
  3) browse to https://mail.google.com
  4) log in with an account that uses 2FA (I’m testing with a @canonical.com 
address)
  5) read your e-mails
  6) close the browser window
  7) launch webbrowser-app again

  Expected result: you’re back to your inbox, logged in and ready to
  work

  Actual result: google prompts you for your e-mail address. Once
  entered, the login happens automatically, there is no need to do the
  2FA dance again.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/webbrowser-app/+bug/1605218/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to