912219 - Generate Hawk headers using Sync 2.0 token from FxAccounts module

Status: VERIFIED INVALID

(Firefox :: Sync, defect)

Description

[Zachary Carter [:zaach]]

The FxAccounts module can expose a method for generating Hawk authorization headers, which rely on the Sync 2.0 token it has stored.

Comment 1

[Chris Karlof [:ckarlof]]

Alternative API is to have the FxAccounts module expose an interface to get the token, and the Hawk auth header generation can happen in identity.js. I think that's better, but I could be swayed.

Comment 2

[Richard Newman [:rnewman]]

Generally, pass as little between compartments as possible. Given that some Hawk headers require reading the request body, I'd go with Chris's approach in Comment 1. Generally I feel like that's a smoother API, too.

Comment 3

[Zachary Carter [:zaach]]

Yeah, let's keep Hawk out of the FxA module.

Comment 4

[James Bonacci [:jbonacci]]

OK. Marking Verified/Invalid.