What's New in FxA: train-88 edition

2017-06-08 Thread Ryan Kelly
Hi All, This week we will be shipping FxA train-88 to production, with the following highlights: Features: Add email address to account (Phase 1) - This feature is live in production for Mozilla and Softvision email addresses. - We're now determining what we need to do

supporting "public" OAuth clients with PKCE

2017-06-08 Thread Ryan Kelly
TL;DR: we plan to add support for an OAuth protocol extension called "PKCE" to help webextensions and mobile apps get connected to FxA; feedback welcome. Hi All, The OAuth reliers that we've added to FxA so far have all been what RFC6749 calls "confidential clients" - applications running in a