1245614 - Prod FxA client id and secret for AMO stage and prod

Status: RESOLVED FIXED

(Cloud Services :: Operations: Miscellaneous, task)

Description

[Mark Striemer [:mstriemer]]

I'd like two sets of client ids and secrets generated as trusted reliers for production FxA. We use production FxA for Marketplace stage so figure we should do the same for AMO.

Name: Add-ons Stage
Redirect URI: https://addons.allizom.org/api/v3/accounts/authenticate/

Name: Add-ons Production
Redirect URI: https://addons.mozilla.org/api/v3/accounts/authenticate/

Hopefully that's all you need. Credentials can be sent to myself and/or Jason Thomas.

Comment 1

[Ryan Kelly [:rfkelly]]

What's the client_id you're using in dev?  We try to keep them consistent across environments where possible, it makes things a bit easier on both sides for config management, metrics, etc.

Comment 2

[Mark Striemer [:mstriemer]]

The dev client_id is 1e5a77cf09e5b4b5.

Comment 3

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

Your client ID for stage will be the same as the one in dev; however, b/c they're both going to be in the prod DB, I've assigned a new client ID for prod.

Comment 4

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

Creds sent to :jthomas

{"id":"1e5a77cf09e5b4b5","name":"AMO Stage","trusted":true,"image_uri":"","redirect_uri":"https://addons.allizom.org/api/v3/accounts/authenticate/","terms_uri":"","privacy_uri":""}

{"id":"a4907de5fa9d78fc","name":"AMO Prod","trusted":true,"image_uri":"","redirect_uri":"https://addons.allizom.org/api/v3/accounts/authenticate/","terms_uri":"","privacy_uri":""}

Comment 5

[Jason Thomas [:jason]]

(In reply to Chris Kolosiwsky [:ckolos] from comment #4)

> {"id":"a4907de5fa9d78fc","name":"AMO
> Prod","trusted":true,"image_uri":"","redirect_uri":"https://addons.allizom.
> org/api/v3/accounts/authenticate/","terms_uri":"","privacy_uri":""}

Redirect_uri should be: https://addons.mozilla.org/api/v3/accounts/authenticate/

Comment 6

[Jason Thomas [:jason]]

The actual config looks correct here, https://github.com/mozilla-services/puppet-config/commit/eff4f58f766eb5b9f8523ed59736a39ba3121a69, ckolos can you verify?

Comment 7

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

MySQL [fxa_oauth]> select name,redirectUri from clients where id = unhex('a4907de5fa9d78fc');
+----------+----------------------------------------------------------+
| name     | redirectUri                                              |
+----------+----------------------------------------------------------+
| AMO Prod | https://addons.mozilla.org/api/v3/accounts/authenticate/ |
+----------+----------------------------------------------------------+

fixed. I blame the flu.