1200695 - API-key-creation emails should reflect if the action was a result of auth delegation

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: API, defect, P1)

Description

[Mark Côté [:mcote]]

The API-key creation emails are a little misleading when they are the result of logging into a third-party app via auth delegation.  While we still want to let the user know that a key has been created, so that they can later revoke it if they want, the email doesn't make it clear that the key was created on their behalf.  Specifically the line "IMPORTANT: If you did not request a new key, your Bugzilla account may have been compromised" is a bit confusing/alarming, since the key wasn't created as a direct result of a user action in Bugzilla.

These emails should instead contain something like

"An API key was created on your behalf for use by MozReview.  You can view or update the key at the following URL: <url>.  Revoking this key will prevent MozReview from performing any actions in Bugzilla on your behalf until you log in again."

Comment 1

[Israel Madueme [:imadueme]]

Attachment: Github PR - #490