BrowserID extension should allow custom configuration of browserid hostnames to use for verification

RESOLVED FIXED

Status

()

bugzilla.mozilla.org
Extensions: Persona
RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: ozten, Assigned: dkl)

Tracking

Production
Dependency tree / graph

Details

Attachments

(1 attachment)

(Reporter)

Description

4 years ago
The stage instance of our Bugzilla install should use the stage instance of the Persona service.

So https://bugzilla-stage.mozilla.org/  should include

    https://login.anosrep.org/include.js

to verify assertions, the backend should use

    https://verifier.login.anosrep.org/verify

This will allow the BMO and Identity team to discover incompatibilities with the next release of Persona, before they hit production.
this request really applies to bugzilla-stage-tip (our development env), not bugzilla-stage, which is used for pre-production staging and must mirror production.
Summary: https://bugzilla-stage.mozilla.org/ should use Stage Persona → https://bugzilla-stage-tip.mozilla.org/ should use Stage Persona
(Reporter)

Comment 2

4 years ago
(In reply to Byron Jones ‹:glob› from comment #1)

We'd like a copy of production code pointed to Persona stage code.

We'll be filing a bug with details, but we've just rolledback a production deployment, because production bugzilla didn't pass our verification test pass. (All other websites did pass this test). It would have been great to catch this during stage testing of our system.
(In reply to Austin King [:ozten] from comment #2)
> (In reply to Byron Jones ‹:glob› from comment #1)
> 
> We'd like a copy of production code pointed to Persona stage code.

bugzilla-stage-tip is running the same persona code we're running on production so that won't be an issue.
(Assignee)

Updated

4 years ago
Assignee: nobody → dkl
Status: NEW → ASSIGNED
OS: Mac OS X → All
Hardware: x86 → All
Summary: https://bugzilla-stage-tip.mozilla.org/ should use Stage Persona → BrowserID extension should allow custom configuration of browserid hostnames to use for verification
(Reporter)

Updated

4 years ago
Blocks: 820446
(Assignee)

Comment 4

4 years ago
Created attachment 691422 [details] [diff] [review]
Patch to allow host configuration for BrowserID extension (v1)
Attachment #691422 - Flags: review?(glob)
Comment on attachment 691422 [details] [diff] [review]
Patch to allow host configuration for BrowserID extension (v1)

It's not BrowserID anymore... Can you use this opportunity to rename everything from BrowserID to Persona, including the URLs?
Attachment #691422 - Flags: review-
(In reply to Reed Loden [:reed] from comment #5)
> It's not BrowserID anymore... Can you use this opportunity to rename
> everything from BrowserID to Persona, including the URLs?

file a new bug for that please.
Attachment #691422 - Flags: review-
(Reporter)

Comment 7

4 years ago
Not to bikeshed...

BrowserID is still the name of the protocol. Some low level libraries will remain browserid-crypto, for example.

Persona is the user facing name, so high level things like a pluggable authentication library should expose "Persona".
(In reply to Byron Jones ‹:glob› from comment #6)
> (In reply to Reed Loden [:reed] from comment #5)
> > It's not BrowserID anymore... Can you use this opportunity to rename
> > everything from BrowserID to Persona, including the URLs?
> 
> file a new bug for that please.

Bug 820936
Comment on attachment 691422 [details] [diff] [review]
Patch to allow host configuration for BrowserID extension (v1)

Review of attachment 691422 [details] [diff] [review]:
-----------------------------------------------------------------

r=glob

i think the two parameters should be the full url to the services, not just the domain prefix.
ie: https://browserid.org/verify and https://browserid.org/include.js
mostly because i think it's clearer, and more future-proof if the urls change (more likely to happen to the non-production systems).

if you agree, this can be changed on commit.

::: extensions/BrowserID/template/en/default/hook/account/auth/login-additional_methods.html.tmpl
@@ +1,2 @@
> +[% IF Param('user_info_class').split(',').contains('BrowserID') 
> +      && Param('browserid_includejs_server') %]

nit: trailing whitespace :)
Attachment #691422 - Flags: review?(glob) → review+
(Assignee)

Comment 10

4 years ago
Committing to: bzr+ssh://dlawrence%40mozilla.com@bzr.mozilla.org/bmo/4.0
modified extensions/BrowserID/Extension.pm
added extensions/BrowserID/lib/Config.pm
modified extensions/BrowserID/lib/Login.pm
added extensions/BrowserID/template/en/default/admin
added extensions/BrowserID/template/en/default/admin/params
added extensions/BrowserID/template/en/default/admin/params/browserid.html.tmpl
modified extensions/BrowserID/template/en/default/hook/account/auth/login-additional_methods.html.tmpl
modified extensions/BrowserID/template/en/default/hook/account/auth/login-small-additional_methods.html.tmpl
Committed revision 8430

Committing to: bzr+ssh://dlawrence%40mozilla.com@bzr.mozilla.org/bmo/4.2 
modified extensions/BrowserID/Extension.pm
added extensions/BrowserID/lib/Config.pm                                       
modified extensions/BrowserID/lib/Login.pm
added extensions/BrowserID/template/en/default/admin
added extensions/BrowserID/template/en/default/admin/params
added extensions/BrowserID/template/en/default/admin/params/browserid.html.tmpl
modified extensions/BrowserID/template/en/default/hook/account/auth/login-additional_methods.html.tmpl
modified extensions/BrowserID/template/en/default/hook/account/auth/login-small-additional_methods.html.tmpl
Committed revision 8479.

dkl
Status: ASSIGNED → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
Committing to: bzr+ssh://bjones%40mozilla.com@bzr.mozilla.org/bugzilla/extensions/browserid/trunk/
modified Extension.pm
added lib/Config.pm
modified lib/Login.pm
added template/en/default/admin
added template/en/default/admin/params
added template/en/default/admin/params/browserid.html.tmpl
modified template/en/default/hook/account/auth/login-additional_methods.html.tmpl
modified template/en/default/hook/account/auth/login-small-additional_methods.html.tmpl
modified template/en/default/hook/global/header-additional_header.html.tmpl
Committed revision 17.
(Reporter)

Updated

4 years ago
Blocks: 851322
You need to log in before you can comment on or make changes to this bug.