919157 - Provide FirefoxOS support for Persona realms logout

Status: RESOLVED WONTFIX

(Core Graveyard :: Identity, defect)

Description

[Jed Parsons (use needinfo, please) [:jedp, :jparsons]]

In order to support SSO on Persona [1][2], I think we need some client-side code to enable the logout feature.  Currently, logout does not work properly on FirefoxOS.

STR:

Configure your b2g device to use the ephemeral realms persona server:
pref("toolkit.identity.uri", "https://realms.personatest.org");

Now:
- Visit https://realms1.personatest.org/ and sign in
- Visit https://realms2.personatest.org/ and you should be auto signed in (yay)
- Now sign out of either site

Expected: 
- You are automatically signed out of both sites
- On page reload, you remain signed out

Actual:
- You can't sign out.  Page reload is futile.

[1] SSO issue: https://github.com/mozilla/browserid/issues/2555
[2] PR providing SSO: https://github.com/mozilla/browserid/pull/3854

Comment 1

[Jed Parsons (use needinfo, please) [:jedp, :jparsons]]

This is the bit that needs to work on b2g:
https://github.com/mozilla/browserid/pull/3854/files#L10R1625

Data siloing and the discarding of the persona iframe for each RP when it's not in active use may likely mean that there's a need for client-side platform code to make this work.  I don't know at this time how we can support this for prior versions of FirefoxOS, but for future versions, I suspect we're going to have to have a hook in our hosted internal_api that signals to the native code to sign out all RPs that share the same realm.

Comment 2

[Shane Tomlinson [:stomlinson]]

Is this a dup of what is logged in https://github.com/mozilla/browserid/pull/3854#issuecomment-24166766? If so, this is a universal breakage.

Comment 3

[Shane Tomlinson [:stomlinson]]

> Is this a dup of what is logged in
> https://github.com/mozilla/browserid/pull/3854#issuecomment-24166766? If so,
> this is a universal breakage.

:jedp, disregard this, :seanmonstar already took care of that issue.

Comment 4

[Jed Parsons (use needinfo, please) [:jedp, :jparsons]]

Persona bug for BrowserID internal_api updates that will be necessary to support this:
https://github.com/mozilla/browserid/issues/3915

Comment 5

[Jed Parsons (use needinfo, please) [:jedp, :jparsons]]

Attachment: 919157-realms-logout

This sort of works.  It causes logout from one RP to trigger logout from the others in the same realm.

But page reload still logs you back in.  Hm...

Comment 6

[Jed Parsons (use needinfo, please) [:jedp, :jparsons]]

With the current Persona API proposals, we're not looking at supporting realms.  

Also, as far as FirefoxOS and Firefox Accounts is concerned (bug 920135), we won't be using the persona flow, so this bug isn't relevant to that.