Open Bug 1916843 Opened 2 months ago Updated 2 months ago

Check merge-warnings work correctly in oauth flows.

Categories

(Firefox :: Firefox Accounts, defect, P2)

defect
Points:
5

Tracking

()

People

(Reporter: markh, Unassigned)

References

(Depends on 1 open bug)

Details

When we get a "login" webchannel message, we record the last user connected for use by future merge-warnings. However, we only record it when the user is verified. This is the code

However, in an account creation flow, we expect this login message before the account is verified. Once we get the final oauth_login message we do know the account was verified - but the code handling that (just a few lines below the above) doesn't attempt to report that last user.

There's a reasonable chance something else calls this instead - which kinda implies to me that the first call in login might not strictly be necessary. Regardless, this but is primarily to assure ourselves there are no login flows which do not call setPreviousAccountNameHashPref, because if that's not called, the next signin of a different user will not show a merge warning.

Points: --- → 5
You need to log in before you can comment on or make changes to this bug.