1260257 - Limit new accounts to github only.

Status: RESOLVED FIXED

(developer.mozilla.org Graveyard :: User management, task)

Description

[Ben (:bensternthal)]

What feature should be changed? Please provide the URL of the feature if possible.
==================================================================================
New accounts can no longer be created using persona. Users with persona accounts are still able to login.

What problems would this solve?
===============================
Currently the percentage of spam from Persona accounts is 81% with github accounting for 19%. It is unknown why this occurs but we think persona is an easier target for creating a disposable account. If this is true we would expect the volume of spam accounts to decrease by ~80%. If github proves just as easy a target we would expect a much smaller reduction in spam accounts, if any. It is important to note that Persona is being retired in Nov, so this is a necessary first step in turning off Persona.

Who would use this?
===================
All new users.

What would users see?
=====================
In addition to changes on the backend, some basic messaging must be added to the signup box. Shobson has mockups already.

What would users do? What would happen as a result?
===================================================
New users would register via github.

Is there anything else we should know?
======================================
Marking as confidential for now, due to the inclusion of spam stats. I am erring on private for these, we can open them up if necessary.

Comment 1

[Stephanie Hobson [:shobson]]

Attachment: Screen Shot 2016-03-21 at 10.35.03.png

Mockup for UI changes.

Comment 2

[John Whitlock [:jwhitlock]]

Adding safwan (has NDA) at his request, adding Kadir to get it back on his radar.

My vote is that this ticket can be opened up. Disabling Persona is a good step to lower the number of accounts that will need to be migrated to GitHub in the coming months.  I expect it to have a temporary impact on spam, as spam accounts move to GitHub.

Persona shutdown page:

https://wiki.mozilla.org/Identity/Persona_Shutdown_Guidelines_for_Reliers

Comment 3

[MDN Team (:mdn-dev)]

Commits pushed to master at https://github.com/mozilla/kuma

https://github.com/mozilla/kuma/commit/35dc69c1391523d32f05e839d967d1e9285841da
bug 1260257 - Refactor, expand social login tests

Create SocialTestMixin, to hold the helper methods persona_login
and github_login. Update tests in test_views and test_templates to
use the same methods.

Expand the social login tests to increase code coverage, and to
keep coverage after Persona signups are removed.

https://github.com/mozilla/kuma/commit/0a548e6eaed89996d7820de4582a2d6cd45dcb1b
bug 1260257 - Disable Persona for signups

Disable tests that exercise account creation with Persona

https://github.com/mozilla/kuma/commit/feb0a8c363fc4eeaacd25dfa7b349700cbce0d0e
bug 1260257 - Remove Persona branches from signup

Remove code that is now unreachable with Persona signups disabled.
Adjust the signup view form to handle the case where there are no
 emails returned from GitHub (which may be an impossible case).

https://github.com/mozilla/kuma/commit/6a601785794334b16ab8a7e7848de046491b89e8
Merge pull request #3913 from mozilla/disable_persona_signup_1260257

bug 1260257 - Disable signup with Persona

Comment 4

[John Whitlock [:jwhitlock]]

Pushed to staging and production.