Closed Bug 1561905 Opened 5 years ago Closed 5 years ago

[third-party] Support third-party logins

Categories

(Taskcluster :: UI, task)

task
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: dustin, Assigned: hassan)

References

Details

In the latest (and final?) iteration of sign-in, we are no longer supporting the auth0-specific, audience-based federated login approach that treeherder, treestatus, tooltool, and https://bugzilla-management-dashboard.netlify.com/ use.

Instead, we'll be switching to an approach based on the existing client creator following roughly the flow we use for the command-line taskcluster signin command.

This will likely need additional review from someone on the sec team, both before implementation (to make sure the design is sound) and after.

I'm going to start by writing up in detail the proposed plan, and getting some review from sec-focused people.

Assignee: helfi92 → dustin

I wrote up a proposal here:
https://docs.google.com/document/d/1x2PZGXQZCPK5iOmPVBURxVtnLRSC1QxZ1ssZmwMPiDA/edit#

Hassan, before I shop this around, can you take a look and share your feedback?

Flags: needinfo?(helfi92)
Summary: Support federated logins via client-creator → Support third-party logins via client-creator

Looks really good!

Flags: needinfo?(helfi92)

I sent an email seeking feedback on that proposal from the affected folks as well as AJ and Kang.

Assignee: dustin → helfi92
Summary: Support third-party logins via client-creator → Support third-party logins
Blocks: 1566190
Blocks: 1573977
Summary: Support third-party logins → [third-party] Support third-party logins

Third party login is now supported. Should we consider this resolved?

Flags: needinfo?(dustin)

I think so!! Awesome!

Status: NEW → RESOLVED
Closed: 5 years ago
Flags: needinfo?(dustin)
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.