481146 - [E-1.2.1] Cookie Lookup

Status: RESOLVED FIXED

(addons.mozilla.org Graveyard :: Collections, defect)

Description

[Brian King [:kinger]]

If the user is logged into AMO and has a valid session cookie, that session should be used for Bandwagon activities.

Comment 1

[Brian King [:kinger]]

For auth, the extension actually won't even have to deal with setting cookies or handling logins. The "login dialog" [E-1.2.2] is actually just opening a special AMO login page in a smaller window. The logging in and registering will all be handled on AMO, and the extension just has to check for the cookie's existence. The cookie will be automatically passed in all the XHR requests to AMO since it's set by AMO, so it should be pretty easy.

Comment 2

[David McNamara [:mackers]]

The extension now looks up the AMO cookie to determine the correct action to take.

If the cookie exists, then the user is presumed authenticated and all API calls proceed as normal.

If the cookie does not exist, then API calls are suspended and the bandwagon panel in extensions manager displays the "You must log in to AMO" message.