1300044 - Request for production FxA OAuth client credentials for Pontoon

Status: RESOLVED FIXED

(Cloud Services :: Operations: Deployment Requests - DEPRECATED, task)

Description

[Matjaz Horvat [:mathjazz]]

We're switching to Firefox Accounts as the authentication provider in Pontoon. Please provision client credentials for our two environments.

Production:
- name: Pontoon
- redirect_uri: https://pontoon.mozilla.org/accounts/fxa/login/callback/

Staging:
- name: Pontoon Staging
- redirect_uri: https://mozilla-pontoon-staging.herokuapp.com/accounts/fxa/login/callback/

We use the following credentials for development:
- client_id: 2651b9211a44b7b2
- oauth_endpoint: https://oauth-stable.dev.lcip.org/v1

Comment 1

[Ryan Kelly [:rfkelly]]

Just explicitly noting my approval for this request.

Comment 2

[Matjaz Horvat [:mathjazz]]

We'd like to deploy FxA support soon to give users as much time as possible for account migrations before Persona is shut down. This is our only blocker.

Please let me know if you need anything else from us.

Comment 3

[Ryan Kelly [:rfkelly]]

:jbuck do you have everything you need to provision these?

Comment 4

[Jon Buckley [:jbuck]]

:mathjazz can you add your PGP fingerprint to https://login.mozilla.com/ so I can encrypt these OAuth credentials? Thanks!

If you haven't set PGP up before, https://mana.mozilla.org/wiki/display/SECURITY/GnuPG%2C+GPG%2C+OpenPGP%2C+PGP has instructions on generating keys, uploading them to Mozilla's keyserver, and adding your fingerprint to LDAP.

Comment 5

[Matjaz Horvat [:mathjazz]]

Done, thanks for the instructions!

Comment 6

[Jon Buckley [:jbuck]]

Okay, I've encrypted & emailed the credentials to your Bugzilla email address. Please verify that both stage & prod credentials are working for you

Comment 7

[Matjaz Horvat [:mathjazz]]

Thanks Jon!

We've tested the keys and they work fine in both, staging and prod (deploying later this week).