Closed Bug 711474 Opened 14 years ago Closed 14 years ago

browserid: Require re-sign-in on profile edit page to change email address

Categories

(developer.mozilla.org Graveyard :: Wiki pages, defect)

Product:
developer.mozilla.org Graveyard
Component:
Wiki pages
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 714228

People

(Reporter: lorchard, Unassigned)

References

Details

(Whiteboard: u=user c=browserid p=)

Currently, we allow email address changes without verification. This is problematic, since BrowserID relies on verified email addresses. The kitsune code has code paths to send out a new verification link email, but the BrowserID service already does that. Instead, what might work better is a special-case "Sign In" button on the profile editing page. Performing a sign-in-while-signed-in action allows the user to indicate a new pre-verified email address for the profile. Messaging and UI for this might be tricky - eg. "Why am I signing in when I'm already signed in?"
Bug 703364 makes this situation better, by enabling the Kitsune email change confirmation code with Kuma tweaks. We can still make it smoother in the BrowserID case with this proposed "sign in to change email address" action, though. Less of a crucial issue, more of a nice-to-have now, though.
Depends on: 703364
Sticking in 2.0 for consideration, though this seems puntable
Target Milestone: --- → 2.0
Depends on: 711467
Whiteboard: u=user c=browserid p=
Target Milestone: 2.0 → 2.1
We already did this. w00t!
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Target Milestone: 2.1 → ---
Version: MDN → unspecified
Component: Website → Landing pages
Product: developer.mozilla.org → developer.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.