Make logging in to Firefox Account-backed web properties easy when the device has an Android Firefox Account

NEW
Unassigned

Status

Android Background Services
Firefox Accounts
2 years ago
2 years ago

People

(Reporter: nalexander, Unassigned)

Tracking

(Blocks: 2 bugs)

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

2 years ago
Right now a Firefox for Android user who has an Android Firefox Account will have to log in to any Firefox Account-backed service on the web.  (This is because they have used a custom native sign in flow that does provide log in credentials to any web context.)

We should try to make this better, perhaps with an X-Auto-Login like solution.  

This ticket tracks adding a "semi-native" flow whereby a user visiting accounts.firefox.com or an oauth-backed service does not have to enter their password again if the Android Firefox Account on device can provide a login credential.
(Reporter)

Comment 1

2 years ago
For context: this hasn't be an issue to date because Firefox for Android users essentially never interact with a Firefox Account-backed web property.  They don't use accounts.firefox.com (except by very occasional choice) or a Hello-like OAuth flow.

vladikoff, others: does the existing WebChannel messaging system already allow a "clean" browser context (one with no cookies or localStorage, etc) to log in to, say, accounts.firefox.com or the oauth log-in page for a referrer?

If so perhaps we can make this work by implementing the accounts WebChannel interface on Android.
Flags: needinfo?(vlad)
(Reporter)

Updated

2 years ago
Blocks: 1158875
(In reply to Nick Alexander :nalexander from comment #1)
> For context: this hasn't be an issue to date because Firefox for Android
> users essentially never interact with a Firefox Account-backed web property.
> They don't use accounts.firefox.com (except by very occasional choice) or a
> Hello-like OAuth flow.
> 
> vladikoff, others: does the existing WebChannel messaging system already
> allow a "clean" browser context (one with no cookies or localStorage, etc)
> to log in to, say, accounts.firefox.com or the oauth log-in page for a
> referrer?
> 
> If so perhaps we can make this work by implementing the accounts WebChannel
> interface on Android.

Hey Nick,

I created a content-server bug for this feature: https://github.com/mozilla/fxa-content-server/issues/2353
Currently we don't have an easy away to start a clean "suggested" login flow AFAIK. 
I wonder if there is a way to populate localStorage for some "origin" before displaying the login webview.
 
Vlad.
Flags: needinfo?(vlad)
(Reporter)

Updated

2 years ago
Blocks: 1159329
You need to log in before you can comment on or make changes to this bug.