"The authorization headers in your request are not valid: Invalid access token" when using Firefox ModHeader extension (for patrolled edits, adding to watchlist; logoff impossible)
Closed, InvalidPublic
Actions

Assigned To

None

Authored By

	JackPotte
	Apr 9 2020, 12:46 PM

Description

On all wikis, every day for around one month, I can't patrol during several hours, around from 11 to 19 UTC+1.

I can see the link to mark as patrolled but the following error occurs when I click on it:
The authorization headers in your request are not valid: Invalid access token
(in English whereas my interface is in French)

So I have to retry the evening and it works. For example now, I can't patrol:

Event Timeline

JackPotte created this task.Apr 9 2020, 12:46 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 9 2020, 12:46 PM

JackPotte updated the task description. (Show Details)Apr 9 2020, 12:46 PM

Not site request, so removing Wikimedia-Site-requests...

RhinosF1 subscribed.Apr 9 2020, 1:26 PM

Removing MediaWiki-extensions-Patroller as that extension is not deployed on Wikimedia websites.

Hi @JackPotte, which browser(s) has this been tested with? What are clear steps to reproduce, step by step? Please follow https://www.mediawiki.org/wiki/How_to_report_a_bug Also, do you know if someone else also has the same problem?

I use Firefox, by just clicking on "mark as patrolled" as I thought it was clear.
As far as I know, the bug does not occur on Chrome or Edge.
I could bypass the bug by adding &debug=true into the Firefox URL bar.

This bug also occurs if I click with Vector on the star icon, to add a page to my watchlist or try to log off.
If I empty my cookies (and local storage), I'm unlogged but if I click on "log in" the site logs me in without any password and the bug persists.

JackPotte renamed this task from [Patrolled Edits or Watchlist] The authorization headers in your request are not valid: Invalid access token to [Patrolled Edits or Watchlist or logoff impossible] The authorization headers in your request are not valid: Invalid access token.Apr 9 2020, 9:14 PM

JackPotte renamed this task from [Patrolled Edits or Watchlist or logoff impossible] The authorization headers in your request are not valid: Invalid access token to [Patrolled Edits or add to watchlist or logoff impossible] The authorization headers in your request are not valid: Invalid access token.

In private navigation, the bug does not occur.

OK I've figured it out, it was my Firefox module "ModHeader" which used to send the HTTP header key "Authorization" with a token.

JackPotte updated the task description. (Show Details)Apr 9 2020, 9:45 PM

Great that you found the reason! After your comment T249813#6044841 I would have probably linked you to https://www.mediawiki.org/wiki/Help:Locating_broken_scripts :)

As there is nothing to fix in Wikimedia code, I am closing this task as invalid.

"The authorization headers in your request are not valid: Invalid access token" when using Firefox ModHeader extension (for patrolled edits, adding to watchlist; logoff impossible)Closed, InvalidPublicActions

Description

Event Timeline

"The authorization headers in your request are not valid: Invalid access token" when using Firefox ModHeader extension (for patrolled edits, adding to watchlist; logoff impossible)
Closed, InvalidPublic
Actions