Closed Bug 938461 Opened 11 years ago Closed 10 years ago

Detect and adjust to timeskew errors after API calls to FxAccounts API server

Categories

(Cloud Services :: Firefox: Common, defect)

Product:
Cloud Services
Component:
Firefox: Common
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 957863

People

(Reporter: zaach, Unassigned)

References

Details

(Whiteboard: [qa+]) 

The client should be able to catch the error and adjust the timestamp it uses to send Hawk authenticated API calls.

API server issue on github: https://github.com/mozilla/picl-idp/pull/233
Whiteboard: [qa+]
Additional context here: https://github.com/mozilla/fxa-js-client/issues/12

And some notes on potential security implications of doing this here: https://github.com/hueniverse/hawk#future-time-manipulation
We're now also sending a "Timestamp" header in each response, so you can keep your clock in sync on an ongoing basis.
Blocks: 943521
Zack, do you have any thoughts on what the implementation should look like?
Flags: needinfo?(zack.carter)
Status: NEW → RESOLVED
Closed: 10 years ago
Flags: needinfo?(zack.carter)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.