Closed
Bug 1925780
Opened 2 years ago
Closed 2 years ago
Verified account checks aren't appropriate for oauth flows
Categories
(Firefox :: Firefox Accounts, defect)
Firefox
Firefox Accounts
Tracking
()
RESOLVED
FIXED
133 Branch
| Tracking | Status | |
|---|---|---|
| firefox133 | --- | fixed |
People
(Reporter: markh, Assigned: markh)
References
Details
Attachments
(1 external file)
We currently check the verified flag on the account data to know whether the account is fully connected to Firefox. In oauth flows, this isn't enough - even if the account is marked as verified, we aren't truly connected in oauth flows until we actually have the scoped keys. The proposed fix is to return verified=false when we don't have these keys.
|
Assignee | |
Comment 1•2 years ago
|
||
|
||
Updated•2 years ago
|
Assignee: nobody → markh
Status: NEW → ASSIGNED
Pushed by mhammond@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/db4617fd0ec6
oauth flows use the state of the keys to determine verified status. r=lina
|
||
Comment 3•2 years ago
|
||
| bugherder | ||
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
status-firefox133:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 133 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•