596231 - Delete Account and Password Reset should accept email address

Status: RESOLVED FIXED

(Cloud Services :: Web Site - Deprecated, defect)

Description

[Philipp von Weitershausen [:philikon]]

As of bug 589979 (Fx Sync 1.5b3), users sign up with just an email address. The username is generated by hashing the email address. When logging into an existing account, Fx Sync will check whether the account name contains any characters not allowed in the username (such as the @ from an email address). If not, it's an old account. If yes, the username is generated like this:

  username = LowerCase(Base32(SHA1(LowerCase(accountname))))

The web pages that allow users to delete their account and reset their password should do the same: accept both old fashioned usernames and email addresses, using the above conversion to get the username from their email address.

Comment 1

[Tony Chung [:tchung]]

just noting the sites:
https://services.mozilla.com/delete-account/
https://services.mozilla.com/reset-password/

Comment 2

[Mike Connor [:mconnor]]

Attachment: v1

This has the x-forwarded-for fix as part of the diff, I miss Hg already.

Comment 3

[Mike Connor [:mconnor]]

Pushed to prod, should be live within 15 minutes.