1923669 - Export for Mobile: Handle password inclusion option for OAuth2 accounts

Status: RESOLVED FIXED

(Thunderbird :: Account Manager, task)

Description

[Toby Pilling [:tobyp]]

The option to include password is frustrating for many users, because in most cases the user has to use MFA to re-authenticate on their mobile device - so including the password in the QR code is a waste of time for them and sets bad expectations...

The solution proposed is two part:
a.) If all accounts are oauth accounts, just hide the option to include password
b.) if some accounts are oauth accounts, add some text to warn users about having to complete MFA on device:

Above the message that says....

By scanning the following QR codes, your account settings—including your email and password—will be transferred securely. We do not collect, store, or share any of this data during the process. The transfer occurs directly between your devices.

... add another paragraph with warning icon to say:

"Some of your accounts appear to use an authentication method which may require you to re-authenticate on your mobile device. In this case, passwords may need to be entered again on your device as part of that process."

Comment 1

[Toby Pilling [:tobyp]]

Laurel can you please confirm copy?

Comment 2

[LaurelT]

Minor text clean up. Here's the revision:

Some of your accounts use an authentication method that may require re-authentication on your mobile device. You may need to enter your passwords again during this process.

Comment 3

[Martin Giger [:freaktechnik]]

Attachment: Bug 1923669 - Adjust include passwords in QR section based on authentication methods of selected accounts. r=#thunderbird-front-end-reviewers

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/comm-central/rev/f074f94e55bb
Adjust include passwords in QR section based on authentication methods of selected accounts. r=arschmitz

Comment 5

[Martin Giger [:freaktechnik]]

Comment on attachment 9429984 [details]
Bug 1923669 - Adjust include passwords in QR section based on authentication methods of selected accounts. r=#thunderbird-front-end-reviewers

[Approval Request Comment]
Regression caused by (bug #): -
User impact if declined: Confusing behavior when exporting accounts from Thunderbird to Thunderbird for Android with OAuth accounts.
Testing completed (on c-c, etc.): Comprehensive automated tests, manual testing with Thunderbird for Android against builds.
Risk to taking this patch (and alternatives if risky): Medium risk, modifies a new settings pane. Worst case the application settings don't work.

Patch #14

Comment 6

[Wayne Mery (:wsmwk)]

Comment on attachment 9429984 [details]
Bug 1923669 - Adjust include passwords in QR section based on authentication methods of selected accounts. r=#thunderbird-front-end-reviewers

[Triage Comment]
Approved for beta

Comment 7

[Rob Lemley [:rjl]]

Thunderbird 132.0b5:
https://hg.mozilla.org/releases/comm-beta/rev/5a56565d0119

Comment 8

[Martin Giger [:freaktechnik]]

Uplifted to ESR as part of bug 1926036