Skip to content
This repository has been archived by the owner on Nov 1, 2022. It is now read-only.

Handle the "not now, but maybe later" use case (in SyncConfig?) #3732

Closed
grigoryk opened this issue Jul 11, 2019 · 1 comment
Closed

Handle the "not now, but maybe later" use case (in SyncConfig?) #3732

grigoryk opened this issue Jul 11, 2019 · 1 comment
Labels
<firefox-accounts> Component: FxA <sync> Component: sync-logins

Comments

@grigoryk
Copy link
Contributor

grigoryk commented Jul 11, 2019

Follow-up to #3579

Currently if you don't specify a SyncConfig, sync will be disabled and a sync scope won't be obtained during authentication.

However, for applications that are planning to include syncing in the future, or for applications that may enable/disable it based on some remote flags, that behaviour means that applications are forced to manually specify sync scope via applicationScopes escape hatch. Otherwise, users authenticated while sync was disabled will not have a sync scope, and will be asked to re-authenticate once sync becomes enabled.

This is a good example of an information leak, and an "unknown unknown".

SyncConfig could provide a flag to indicate that sync scope should be obtained regardless, while still allowing disabling syncing?

┆Issue is synchronized with this Jira Task

@grigoryk grigoryk added <firefox-accounts> Component: FxA <sync> Component: sync-logins labels Jul 11, 2019
@data-sync-user data-sync-user changed the title Handle the "not now, but maybe later" use case (in SyncConfig?) FNX3-22367 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?) Aug 1, 2020
@data-sync-user data-sync-user changed the title FNX3-22367 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?) FNX2-16763 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?) Aug 2, 2020
@st3fan st3fan changed the title FNX2-16763 ⁃ Handle the "not now, but maybe later" use case (in SyncConfig?) Handle the "not now, but maybe later" use case (in SyncConfig?) Aug 5, 2020
@jonalmeida
Copy link
Contributor

Moved to bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1794219

Change performed by the Move to Bugzilla add-on.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
<firefox-accounts> Component: FxA <sync> Component: sync-logins
Projects
None yet
Development

No branches or pull requests

2 participants