1200990 - Migrating your FxA to DevEdition then disconnecting it causes your main profile to enter need reauthentication state

Status: RESOLVED DUPLICATE of bug 1419505

(Firefox :: Firefox Accounts, defect, P3)

Description

[Mark Hammond (PTO; back Oct-3) [:markh] [:mhammond]]

STR:
* Have a main profile connected to FxA.
* Start DevEdition with a new profile - it attempts to automatically and silently "migrate" your account from your main profile in migrateToDevEdition() in aboutaccounts.js.
* Disconnect DevEdition from that account.
* Wait for a few hours.
* Your main profile enters the "needs reauth" state.

rfkelly on IRC predicts that the problem is that the sessionToken is copied, so when you disconnect from the DevEdition profile the sessionToken used in your main profile is also invalidated.

Comment 1

[Lina Butler [:lina]]

In a recent email thread about per-channel profiles, Ryan suggested doing something like this:

* Add a "clone session token" API to the Firefox Accounts server
(currently you can only create a new session if you hold the user's
password)
* Have the profile clone operation set a flag in the profile's FxA login data
* When sync starts up in the new profile, have it detect this flag and
clone itself some new credentials

Comment 2

[Lina Butler [:lina]]

I suspect this will evolve into bug 1419505, and Mossop offered some more context in that bug, so duping this.