892025 - Implement Android client for PICL Authentication/Keyserver

Status: RESOLVED FIXED

(Firefox for Android Graveyard :: Android Sync, defect)

Description

[Chris Karlof [:ckarlof]]

The PICL Authentication/Keyserver provides an API for provisioning and authenticating PICL users. It uses email and password for authentication. It also:

* facilitates the retrieval and derivation of the user's data encryption keys
* signs a user's public key which is used to create BrowserID assertions for authenticating to the PICL Storage Server
* implements an API for password reset

Dev server: http://idp.profileinthecloud.net
Code and API docs: https://github.com/mozilla/picl-idp
Protocol details: https://wiki.mozilla.org/Identity/AttachedServices/KeyServerProtocol

It would be great to start collaborating on the implementation of an Android client for this API.

Comment 1

[Chris Karlof [:ckarlof]]

We've reorganized the public API (esp. naming) to be more 'dev-friendly'. Follow the WIP here: https://github.com/mozilla/picl-idp/pull/69

We've also added API calls to address email verification after signup.

Comments are welcome.

Comment 2

[James Bonacci [:jbonacci]]

Adding some QA names...

Comment 3

[Nick Alexander :nalexander [he/him]]

This bug tracks implementing Java HTTP client that talks to a picl-idp server to create new accounts, fetch salts and keys, and sign certificates.

Comment 4

[Nick Alexander :nalexander [he/him]]

Over to rnewman for preliminary feedback (on the client patches).

Comment 5

[Richard Newman [:rnewman]]

This feels pretty good to me. Let's rebase on top of crypto changes before I take another look?

Comment 7

[Nick Alexander :nalexander [he/him]]

Attachment: FxAccountClient, V2.

Re-factored, simplified, and battle hardened.  It's a bit hard to test (even live), but it's working well against localhost and in my Sync 1.1 + FxA tree.

Mostly want to see if anything jumps out at you.

Comment 8

[Richard Newman [:rnewman]]

Comment on attachment 819990 [details] [review]
FxAccountClient, V2.

Comments left on GitHub.

Comment 9

[Nick Alexander :nalexander [he/him]]

https://hg.mozilla.org/projects/elm/rev/1edbcdfbf2ab

Comment 10

[Nick Alexander :nalexander [he/him]]

Comment on attachment 819990 [details] [review]
FxAccountClient, V2.

r=rnewman on github.

Comment 11

[Mark Goodwin [:mgoodwin]]

Secreview happening in bug 942336.

Comment 12

[Tim Taubert [:ttaubert] (inactive)]

https://hg.mozilla.org/mozilla-central/rev/1edbcdfbf2ab

Comment 13

[James Bonacci [:jbonacci]]

Leaving as Resolved given the number of open Depends on bugs