949095 - [User Story] FxA - Refresh Authentication

Status: RESOLVED FIXED

(Firefox OS Graveyard :: Gaia, defect)

Description

[Adam Rogers (:arog)]

User Story:

As a developer, I want to detect if the user has entered their password recently so I can bypass 'forced authentication' before performing an action. This will help me improve the user experence whey they are performing repetitive or frequent actions, like buying several items in the Firefox Marketplace.

Acceptance Criteria:

1. 1. A 3rd party service can detect how long it's been since the user entered their Firefox OS password and decide if they require a forced authentication or not.

Comment 1

[Noemí Freire (:noemi)]

Hi,

All the Forced Authentication implementation is being performed within Bug 949093, could we mark this bug as dupe of that one?. ni to Adam to confirm it. Thanks!

Comment 2

[Adam Rogers (:arog)]

This feature is not a duplicate of Forced Authentication, though it's closely related. 

What we're wanting to do here, is allow a calling application to determine when the user was last challenged with their password.  It can then make a determination if the user should be challenged again or not.  Here's an example using Marketplace (Note that Marketplace doesn't actually work this way)

1. User decides to buy an application from Marketplace
2. The user is challenged for their password (forced auth) to ensure that they are who they say they are
3. 2 minutes later the user decides to buy a second application
4. Marketplace checks and notices that the user passed a forced authentication < 2 minutes ago so does not require them to re-authenticate.  

The feature specified here, enables step number 4 above. 

At this time, this feature is lower priority.

Comment 3

[No-Jun Park [:njpark]]

moztrap link: 
https://moztrap.mozilla.org/manage/case/13709/