Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add BrowserID support to Tokenserver #1215

Closed
ethowitz opened this issue Feb 4, 2022 · 0 comments · Fixed by #1216
Closed

Add BrowserID support to Tokenserver #1215

ethowitz opened this issue Feb 4, 2022 · 0 comments · Fixed by #1216

Comments

@ethowitz
Copy link
Contributor

ethowitz commented Feb 4, 2022

We've determined that there are enough Sync users still using BrowserID that we should continue support for it. The legacy Tokenserver verifies BrowserID assertions by making a request to FxA – the new Tokenserver should do the same.

Acceptance Criteria

  • Add a BrowserIdVerifier that implements VerifyToken and makes a request to FxA to verify BrowserID assertions. Reference this class from the legacy Tokenserver: https://github.com/mozilla-services/tokenserver/blob/master/tokenserver/verifiers.py#L112
  • In the extractors, check whether the Authorization header includes "Bearer" or "BrowserID" and parse the token accordingly
  • Add unit tests and integration tests to ensure that the functionality exactly duplicates that of the legacy Tokenserver
ethowitz pushed a commit that referenced this issue Feb 4, 2022
ethowitz pushed a commit that referenced this issue Feb 7, 2022
ethowitz pushed a commit that referenced this issue Feb 7, 2022
ethowitz pushed a commit that referenced this issue Feb 9, 2022
ethowitz pushed a commit that referenced this issue Feb 28, 2022
ethowitz pushed a commit that referenced this issue Mar 22, 2022
pjenvey added a commit that referenced this issue Apr 26, 2022
(#1215 follow up) we shouldn't need it enabled since moving to reqwest+rustls

and upgrade the easier dependencies

Issue #1215
pjenvey added a commit that referenced this issue Apr 26, 2022
(#1215 follow up) we shouldn't need it enabled since moving to reqwest+rustls

and upgrade the easier dependencies

Issue #1215
pjenvey added a commit that referenced this issue Apr 27, 2022
(#1215 follow up) we shouldn't need it enabled since moving to reqwest+rustls

and upgrade the easier dependencies

Issue #1215
pjenvey added a commit that referenced this issue Apr 27, 2022
(#1215 follow up) we shouldn't need it enabled since moving to reqwest+rustls

and upgrade the easier dependencies

Issue #1215
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant