[Test failure] TC_LEARNER_11: CORS error when unliking SSO account in account settings

[mariajgrimaldi]

Release

Teak

Expected behavior

SSO account is successfully unlike without showing any errors to the user:

Actual behavior

Although the account is successfully unlinked, an error is raised instead so the user needs to reload the page to see the unlinked account:

Screencast.from.05-06-25.13.28.24.webm

Steps to reproduce

1. Configure TPA auth for Open edX
2. Login or Register via third-party authentication
3. Go to account settings > Linked Accounts section
4. Click Unlink {TPA_Name} account
5. Observe error in interface and browser console

Additional information

Request to /auth/disconnect/{backend-slug}/{user_social_auth_id}/ is made when unlinking SSO, and 302 code redirect to location /dashboard is returned.

This was previously addressed here: openedx/wg-build-test-release#376

I'm not sure if it wasn't fully resolved back then or whether something changed throughout these past months that broke it again.

[mariajgrimaldi]

Hey, @crathbun428! Can you give a hand with prioritizing this issue? Thanks!

[mariajgrimaldi]

I can confirm this is also happening in the sumac sandbox

[mariajgrimaldi]

I'll leave here some comments from @ghassanmas made on a slack thread:

My 0.2 cent, If the request going form account MFE is /auth/disconnect/provideer (i.e. no /api in request then it would reply/proxy response form TPA,
And I think the request to disconnect is hanled by social core django ref: https://github.com/openedx/edx-platform/blob/0611c7891a4a2c726c5f4e505baf1b50b68bd895/common/djangoapps/third_party_auth/urls.py#L20 which seems to respond with Redirection rather than JSON ref: https://github.com/python-social-auth/social-core/blob/13a094b4304793960759c864eba243bf3b4588c9/social_core/actions.py#L147-L152

settings DISCONNECT_REDIRECT_URL to MFE account might make it redirect to account page, but then request to be handled in a away that it doens’t expect JSON

In case someone picks this up!