Can enter AMO on android without password when signed in to Sync

RESOLVED INVALID

Status

()

RESOLVED INVALID
a year ago
10 months ago

People

(Reporter: julie, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [sec-insecure-third-party-site-reviewed])

(Reporter)

Description

a year ago
Found in March 21 Sync Fest
(In reply to Julie McCracken (:julie) from comment #0)
> Found in March 21 Sync Fest

Steps to reproduce, please.  It seems likely that you're seeing an interaction with passwords and bugs like Bug 960841 and/or Bug 134269, so this is really an about:accounts bug in Fennec -- or a product decision about what to do with the FxA password in the password manager -- and nothing to do with Sync or AMO.
Whiteboard: [sec-insecure-third-party-site-reviewed]
Markh to find out if this is intentional.
Flags: needinfo?(markh)
According to the FxA lead, it is expected that if you're logging into an oauth relier (such as AMO) in a browser that's connected to sync, you don't need to re-enter your password. Desktop has the same behaviour.
Status: NEW → RESOLVED
Last Resolved: a year ago
Flags: needinfo?(markh)
Resolution: --- → INVALID

Updated

10 months ago
Product: Android Background Services → Firefox for Android
You need to log in before you can comment on or make changes to this bug.