1301332 - Becoming a Firefox Account Relier for Kinto-Webextensions

Status: RESOLVED WONTFIX

(Cloud Services :: Operations: Deployment Requests - DEPRECATED, task)

Description

[Rémy Hubscher (:natim)]

In order to use the new chrome.storage.sync webextension feature and to try it in Nightly we would need to have `client_id` and `client_secret` credentials on both the stage and the prod FxA stack.

Our current `client_id` for dev is: 88dfc7a5545c6129

The requested scope to be used will be: `sync:addon-storage`

Thanks

Comment 1

[Ryan Kelly [:rfkelly]]

What application will hold these credentials?  I was under the impression that the chrome.storage.sync code was landing in Firefox itself and could re-use the existing Firefox client_id.

Comment 2

[Rémy Hubscher (:natim)]

On the Kinto side we are using the client_id and client_secret to validate the token have been issued for this app. What should I configure then?

Comment 3

[Ryan Kelly [:rfkelly]]

IIUC you shouldn't need a client_secret just for verifying the tokens.  Is the server checking that the token was issued to a specific client_id?

Comment 4

[Rémy Hubscher (:natim)]

Apparently it is when we use the server as a relier but for this specific use case we won't so I will close this and we will use the Firefox client_id.