860365 - [login.wm.o] Integrate SSO/webmakernav into webmaker.org

Status: RESOLVED FIXED

(Webmaker Graveyard :: webmaker.org, defect)

Comment 1

[Mike Beltzner [:beltzner, not reading bugmail]]

Moving this to be a focus for week of Apr 22; Ross, can you please let us know if there are any outstanding dependencies you require before you can get crackin'?

Comment 2

[Ross Bruniges [:boozeniges]]

Well potentially a couple of things but I'm not getting my head around the full on dependance list:

- https://bugzilla.mozilla.org/show_bug.cgi?id=863811 (publish/save on webmakernav)
- we also don't have any visual design for this, I have been guessing that the process lives inside of the webmakernav or whatever that becomes
- also, I don't know what the save/publish process looks like right now, because of how we're iframing in the sign-in button I'm not sure how it works with having it in multiple places...

Trying to get a vidyo with kate later to get my head around things.

Comment 3

[Ross Bruniges [:boozeniges]]

Changing the name and component so it's less wishy washy and so that we can better prototype on one single domain.

Comment 5

[Mike Beltzner [:beltzner, not reading bugmail]]

Chatted with Kate and she agreed to find you April 25th AM EDT to make sure we could try and get this sorted by the end of the week. The goal here is to have any ol' dummy app that basically prototypes the functionality of the sign-up and sign-in flows which can then be hooked into by webmaker.org as well as any of the marquee tools (thimble, popcorn maker, x-ray goggles)

Comment 6

[Ross Bruniges [:boozeniges]]

Will fast follow this on Monday morning.

Comment 7

[Ross Bruniges [:boozeniges]]

Looks like most of this has been done by :k88hudson via this PR - https://github.com/mozilla/webmaker.org/pull/2

Will work with Kate to get this merged in/deployed/complete

Comment 8

[Ross Bruniges [:boozeniges]]

:k88hudson - have sent a pull request into your branch (which is currently waiting to go into the main repo).

After this lands (if it's needed) do we need to assign someone for a review of the node set up and stuff?

Comment 9

[Ross Bruniges [:boozeniges]]

Adding Kate to the CC

Comment 10

[Ross Bruniges [:boozeniges]]

Wondering if this might have a duplicate bug in the webmaker.org component...

Comment 11

[Ross Bruniges [:boozeniges]]

http://webmaker.mofostaging.net/ - it's integrated!

Comment 12

[Kieran Sedgwick (:sedge)]

Webmaker.org needs to implement the Webmaker SSO, and the standard server-side session format that SSO is built to allow. 

From the email:

* Implement Persona authentication exactly as you normally would, using the .watch() API. MIU has a pretty standard implementation of this: https://github.com/jbuck/miu/blob/master/views/index.html and https://github.com/jbuck/miu/blob/master/public/javascripts/persona.js

* Replace the script "https://login.persona.org/include.js" with "http://personasso.s3-website-us-east-1.amazonaws.com/include.js". This is not the final location, it's just a place that happens to work well enough for me. a

* Replace the calls to navigator.id with navigator.idSSO.

That's it! You can see how easy this conversion to SSO is with https://github.com/jbuck/miu/compare/sso

Comment 13

[Pomax]

Attachment: https://github.com/mozilla/login.webmaker.org/pull/53

Alright, here we go again. I've filed a pull request that I'd like comments on, but it SHOULD NOT BE MERGED if we're happy with this, as the webmaker-loginapi module is, at the time of writing/attachmenting, not real yet. That needs to become a real thing before this is good enough to land. 

With that said, a repeat of the pull request message:

---

Alright, here we go. I rewrote things so that there's only one client app - mostly because I don't know how to make the Procfile run two instances under --dev mode on different ports. If this is possible, best way to test, rather than building two `app` instances in the code. Also, this uses the new persona system (client side) as well as stubs for the webmaker-loginapi node wrapper (server side at the consumer app). The flow is now:

- user logs in with persona
- persona okays it
- consumer app (client side) calls its own /persona/verify to effect server-side auth as well
- auth passes -> req.session.email is set locally for the consumer app.
- consumer app (client side) then asks the webmaker SSO ui code to check whether this is a new, or known maker.

[EXTRA STEPS FOR NEW MAKER]
- sleak UI slides in to get the user to come up with a webmaker subdomain. they fill it in, save, etc, flow returns to the SSO ui code where this user is now a known maker

- the SSO ui code then calls the consumer app's /user/personaEmail so that the consumer app can (server side) obtain that user's display name and set it as part of the session cookie using the webmaker-loginapi, rather than trusting the client to send a legal display name.

At this would point we *should* have a fully authenticated user, and the locally set cookie can be used for everything.

Comment 14

[Ross Bruniges [:boozeniges]]

Comment on attachment 749044 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/53

Feedback provided in github - it looks like a good start but let's make sure that all the things that were originally added to polish things up - like user feedback for instance is carried over.

Comment 15

[Pomax]

Comment on attachment 749044 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/53

updated the pull request, with the following things:

- updated README
- webmaker-loginapi has been added
- quite a number of code fixes

Renewed scrunity welcome, desired, and necessary.

Comment 16

[Ross Bruniges [:boozeniges]]

Comment on attachment 749044 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/53

r+ assuming that the progress-indicator either gets resolved or a new ticket created for it. I think it would be a shame to loose them as the Persona auto login can at times be a wee bit slow.

Comment 17

[Jon Buckley]

Comment on attachment 749044 [details] [review]
https://github.com/mozilla/login.webmaker.org/pull/53

Looks good to me, notes in the pull request

Comment 18

[[github robot]]

Commit pushed to master at https://github.com/mozilla/login.webmaker.org

https://github.com/mozilla/login.webmaker.org/commit/3b116f86c922d6ca16842c2191f5e7224a4516ba
Fix bug 860365 - added webmaker user bar