www.jabong.com - The login overlay is not dismissed

[softvision-sergiulogigan]

URL: https://www.jabong.com/

Browser / Version: Firefox Nightly 63.0a1 (2018-07-20)
Operating System: Windows 10
Tested Another Browser: Yes

Problem type: Site is not usable
Description: The login overlay is not dismissed
Steps to Reproduce:

1. Navigate to https://www.jabong.com/
2. Click on the "Sign In" button.
3. Fill in the Login form.
4. Click on the "Sign In" button.

Expected Behavior:
The Login form is dismissed, and the login is performed.

Actual Behavior:
The Login form is not dismissed.

Notes:

1. The issue is not reproducible on Chrome 67.0.3396.87.
2. After refreshing the page, the post-login page is displayed.
3. Screenshot/Console logs attached.

Watchers:
@softvision-oana-arbuzov
@softvision-sergiulogigan

sv;

From webcompat.com with ❤️

[karlcow]

in https://static1.jabong.com/live/js/require-main1532101448012.js

        function (e) {
          var t = e.isGuest,
          i = !(!navigator.credentials || !navigator.credentials.preventSilentAccess);
          if (!t && i) {
            var o = new window.PasswordCredential({
              id: e.email,
              password: e.password
            });
            return JABONG.gaqEvent('Smart_Lock~$~Credential~$~store'),
            navigator.credentials.store(o)
          }
          return Promise.resolve()
        }(o).then(function () {

before doing

var o = new window.PasswordCredential({
              id: e.email,
              password: e.password
            });

they should probably do

function PasswordCredential(id, password) {
   this.id = id; 
   this.password = password;
}
var o = new window.PasswordCredential({
              id: e.email,
              password: e.password
            });

in Firefox

in Chrome

I wonder who's right or if this is undefined.

@denschub any idea?

[denschub]

PasswordCredential is part of the WebAuthn spec family. However, the global constructor is not part of the spec, and mdn supports my observation: https://developer.mozilla.org/en-US/docs/Web/API/PasswordCredential/PasswordCredential

This site is checking navigator.credentials to check for access, but as we support most parts of the spec, this returns a valid CredentialsContainer. See https://bugzilla.mozilla.org/show_bug.cgi?id=1294514 for that's left in fully supporting all WebAuthn related specs.

I am not yet comfortable with what the specs say on how to store credentials, so I have to do some reading here. Will follow up.

[karlcow]

This is now working.