RE: WebAPI Security Discussion: Mobile Connection API

2013-07-10 Thread Harald Kirschner
Hi Peter, the permission is listed @ https://developer.mozilla.org/en-US/docs/Web/Apps/App_permissions Just to make sure, you need to work on a packaged app and set the type to "privileged" to be able to add the permission "mobilenetwork". To ensure that you have the latest Simulator version

Re: WebAPI Security Discussion: Mobile Connection API

2013-07-10 Thread Peter Rukavina
On Wednesday, 10 July 2013 18:19:09 UTC-3, Matt Basta wrote: > You want to use the navigator.mozMobileNetwork API. You can see an example of > it's usage in the wild here: > > https://github.com/mozilla/fireplace/blob/master/hearth/media/js/mobilenetwork.js#L263 > > That will give you the MCC a

RE: API for editing existing app installations

2013-07-10 Thread Harald Kirschner
I'd be happy to join to provide real-life scenarios and personas from the partner world if needed. --- Harald Kirschner | Partner Engineer & Web Craftsman | har...@mozilla.com (mailto:hkirsch...@mozilla.com) El lunes, junio 3, 2013 a las 12:24 PM, jsmith.mozi...@gmail.com escribió: > On Fri

RE: How to use Dropbox Datastore API without ability to specific edirect URI?

2013-07-10 Thread Harald Kirschner
As Kumar proposed, "origin" is one solution but only in 1.1. Also "origin" is rather for more controlled CORS configuration on your server and Persona logins. The best solution is "redirects" [1], used in all OAuth implementations in gaia apps in 1.0.1+. You can check their use in gaia communic

Re: How to use Dropbox Datastore API without ability to specific redirect URI?

2013-07-10 Thread Matt Basta
You can, if you're a privileged app, specify an "origin" field in your manifest to have a fixed app:// URI: "origin": "app://my-app-uri/" There's an unfortunate lack of docs surrounding that feature at the moment and it's also not going to be supported until B2G 1.1. That, however, should sol

Re: How to use Dropbox Datastore API without ability to specific redirect URI?

2013-07-10 Thread Kumar McMillan
On Jul 10, 2013, at 3:57 PM, Peter Rukavina wrote: > The new Dropbox Datastore API for JavaScript > (https://www.dropbox.com/developers/datastore/docs/js) requires developers to > register a redirect URI for its OAuth authentication to Dropbox. > > ---snip--- > The API does not allow a redir

Re: Create an offline packaged webapp

2013-07-10 Thread Kumar McMillan
On Jul 10, 2013, at 4:29 PM, Matt Basta wrote: >> 1- anyone by checking the network traffic can see that I have this app >> installed. > > This is a problem for any app (offline or not) that uses HTTP instead of > HTTPS. > >> 2- doing MiM it is possible to inject code on the app and leak all

Re: WebAPI Security Discussion: Mobile Connection API

2013-07-10 Thread Matt Basta
You want to use the navigator.mozMobileNetwork API. You can see an example of it's usage in the wild here: https://github.com/mozilla/fireplace/blob/master/hearth/media/js/mobilenetwork.js#L263 That will give you the MCC and MNC and some other data. You'll need to request the "mobilenetwork" pe

Re: Application Re-Installation Problem

2013-07-10 Thread Matt Basta
Make sure that you're running the latest version of FXOS. Go into your system settings and perform an update. The version that shipped with the phone has some unfortunate bugs, and the latest version available should fix a good deal of them :) - Original Message - From: "Avinash Reddy"

How to use Dropbox Datastore API without ability to specific redirect URI?

2013-07-10 Thread Peter Rukavina
The new Dropbox Datastore API for JavaScript (https://www.dropbox.com/developers/datastore/docs/js) requires developers to register a redirect URI for its OAuth authentication to Dropbox. ---snip--- The API does not allow a redirect URI to be specified as a parameter in the JavaScript authenti

Re: Create an offline packaged webapp

2013-07-10 Thread Matt Basta
> 1- anyone by checking the network traffic can see that I have this app > installed. This is a problem for any app (offline or not) that uses HTTP instead of HTTPS. > 2- doing MiM it is possible to inject code on the app and leak all the > passwords I type in the app. This is also a problem t

Re: Can we deprecate packaged apps?

2013-07-10 Thread zarglu
> Ben Francis: > Are we happy with a packaged model for trusted apps going forward, or is > now the time to embrace the challenge of making trusted apps genuinely part > of the web? Packaged are IMHO the best part of FireFox OS so far, being simple and solving the problem effectively. appcache i

Re: Detect if screen is off?

2013-07-10 Thread Anthony Ricaud
You can probably use the Page visibility API. It will tell you when your app is visible or not. This is a bit different than your question but I believe that it's useful for your use case. https://developer.mozilla.org/en-US/docs/Web/Guide/User_experience/Using_the_Page_Visibility_API On 26/06

Re: Firefox Marketplace and request.result

2013-07-10 Thread abpetkov
So, I got this done. As long with navigator.mozApps.checkInstalled(), I check navigator.mozApps.getSelf() for being empty. If it is not null, the app has been installed. Still this is always null when I run the checkInstalled() function, so I'll just have to use them both. 08 юли 2013, понедел

Content Security Policies (CSP) on FirefoxOS privileged apps

2013-07-10 Thread linkeddu
To test Firefox OS capabilities, I’m writing a privileged app that can have access to various APIs on the device, but I got stuck in the development. I hope you can help me, I cannot find any useful documentation... I’d like to have access to Google Maps APIs from my app, but this requires a scr

Re: r2d2b2g Status, June 28 Edition

2013-07-10 Thread gene . vayngrib
thanks, ctrl-r and especially shift-ctrl-r are greatly appreciated! myk, Simulator v4 is based on latest-mozilla-b2g18_v1_1_0_hd, if I am not mistaken. Are you planning to provide Firefox OS Simulator for the latest-mozilla-central (v25 at this moment)? On Friday, June 28, 2013 2:33:30 PM UTC-4

clearing an incorrect review?

2013-07-10 Thread patrick . n . min
Hi, About 9 months ago someone posted a 1 star review for my app (https://marketplace.firefox.com/app/calcudoku) because the manifest file wouldn't load. Maybe there was a temporary network error at the time, I don't know. I contacted the reviewer several times, to no avail. My contact at mozi

Create an offline packaged webapp

2013-07-10 Thread pancake
I've been puzzled for a while trying to get an offline packaged app. I have packaged my app, and also used html5 cache and localstorage to store all the user settings and (theorically) prevent the browser from checking the internet for updates. But seems like nothing can't prevent a webapp to c

Detect if screen is off?

2013-07-10 Thread zarglu
How do you test from a web app if the screen is off? I made small test app that reads the GPS regularly, however, judging by power consumption, it was still busy reading the GPS and updating its UI while the screen was off. I spotted that behavior in both FireFox OS and FireFox for Android (thi

Re: API for editing existing app installations

2013-07-10 Thread dbuchner
On Tuesday, May 28, 2013 8:59:09 AM UTC-7, Matt Basta wrote: > > Why was that abandoned? > > > > The first it was ever mentioned was 2012 and it's not supported by any of the > devices that we're shipping. It's effectively a non-feature and won't be > useful since it's not backwards compatible

Estimated delay for Firefox Marketplace app review is 30 days: why so long?

2013-07-10 Thread reinvented
I just submitted an app – my first – to the Firefox Marketplace and upon submission my app's status is shown as: Queue position: 93 of 96 Estimated waiting time: 30 working days Waiting 30 days to have an app reviewed seems like a great disincentive to a healthy app developer ecosystem. The M

Re: API for editing existing app installations

2013-07-10 Thread jsmith . mozilla
On Friday, May 31, 2013 4:54:45 PM UTC-7, dbuc...@mozilla.com wrote: > On Friday, May 31, 2013 10:15:07 AM UTC-7, jsmith@gmail.com wrote: > > > I could go into a lot detail responding to the above discussion, but at > > this point, I think we have to get people into a meeting to talk about >

Re: Can we deprecate packaged apps?

2013-07-10 Thread Andrew Williamson
From a marketplace perspective, the majority of packaged apps aren't privileged so most developers are using packaged apps because of some combination of: a) offline support without the horror of appcache b) don't need to maintain a reliable, persistent, server infrastructure c) its what they're

Re: API for editing existing app installations

2013-07-10 Thread dbuchner
On Friday, May 31, 2013 10:15:07 AM UTC-7, jsmith@gmail.com wrote: > I could go into a lot detail responding to the above discussion, but at this > point, I think we have to get people into a meeting to talk about this. > There's misunderstandings evident on both sides of the argument that n

Re: Problem with requesting https via Ajax in FirefoxOS hosted app

2013-07-10 Thread Binh An Tran
Am Dienstag, 28. Mai 2013 19:33:27 UTC+2 schrieb Binh An Tran: > I try to make my website installable on FirefoxOS. But I have following > problem > > > > api.mysite.com:443 uses an invalid security certificate. > > > > The certificate is not trusted because no issuer chain was provided. >

Re: Receiving an OAuth callback in a webapp?

2013-07-10 Thread reinvented
I've done this in a little Foursquare app called Checkin that you can see at: https://github.com/reinvented/checkin Take a look at the OAuth-related code for Foursquare: https://github.com/reinvented/checkin/blob/master/www/js/checkin.js#L136 ___ dev-w

Firefox Marketplace and request.result

2013-07-10 Thread abpetkov
I have a mobile version of a website, where I ask Firefox OS users whether they want to install the app on their Firefox OS device. I do the following, which works just fine: if (!!(navigator.mozApps && navigator.mozApps.installPackage)) { var manifestFile = location.protocol + '//' + locatio

Re: platform-specific icons

2013-07-10 Thread Robert Kaiser
Jonas Sicking schrieb: I think we have a few options here: * Use some sort of naming scheme for icons, like size-platform or size-platform-version. That would get hairy very fast, as the next claim will be you need different sets per platform and version when there's different themes, like W

Re: API for editing existing app installations

2013-07-10 Thread dbuchner
Here are the Bugzilla tickets relevant to this discussion: - Manifest modification API: https://bugzilla.mozilla.org/show_bug.cgi?id=876984 - Device/environment capability API: https://bugzilla.mozilla.org/show_bug.cgi?id=873599 ___ dev-webapps mailing

Re: WebAPI Security Discussion: Mobile Connection API

2013-07-10 Thread reinvented
I am late to the party on this, only having started Firefox OS development recently, but there's an issue that I've encountered that relates to this API. I would like to have access, from non-certified apps, to the LAC, MNC, MCC, signal strength and Cell ID that are returned by window.navigator

Problem with requesting https via Ajax in FirefoxOS hosted app

2013-07-10 Thread Binh An Tran
I try to make my website installable on FirefoxOS. But I have following problem api.mysite.com:443 uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer) The website works normally on firefox browser.

Application Re-Installation Problem

2013-07-10 Thread Avinash Reddy
Hi folks, I got Geeksphone PEAK a couple of days ago. I am working on the basic installation of application to understand the flow of working. There was an issue i found. If I uninstall the application and want to re-install it once again, I was unable to do it. I hosted the application in a p

chromeless packaged web apps (windows)

2013-07-10 Thread rvj
All of the examples of packaged web apps that I have seen, feature the file and edit menus and menu bar Is there a plan ( or is it possible ) to suppress the Windows UI container completely and simply show the content area ? .. so that existing XUL chromeless apps can be migrated if and whe

Re: Detect if screen is off?

2013-07-10 Thread zarglu
> You can probably use the Page visibility API. It will tell you when your > app is visible or not. This is a bit different than your question but I > believe that it's useful for your use case. Thanks, that's indeed suitable in my case, and it seems to be working well in all scenarios. ___

Re: clearing an incorrect review?

2013-07-10 Thread patrick . n . min
Ok, all fixed, the original reviewer checked again and updated the review :-) ___ dev-webapps mailing list dev-webapps@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-webapps

Re: Introducing pointer.js

2013-07-10 Thread Anthony Ricaud
See also the polyfill by Microsoft for the Pointer Event spec: http://handjs.codeplex.com/ Also, note that Firefox and Chrome (maybe others) have a no-delay click event when you use a fixed viewport. On 24/05/13 23:12, Matt Claypotch wrote: A common problem web developers face is abstracting

Re: Application Re-Installation Problem

2013-07-10 Thread 陳侃如
Avinash Reddy writes: > There was an issue i found. If I uninstall the application and want to > re-install it once again, I was unable to do it. What happened? Kanru ___ dev-webapps mailing list dev-webapps@lists.mozilla.org https://lists.mozilla.org

Re: API for editing existing app installations

2013-07-10 Thread jsmith . mozilla
I could go into a lot detail responding to the above discussion, but at this point, I think we have to get people into a meeting to talk about this. There's misunderstandings evident on both sides of the argument that need to be addressed. ___ dev-web

Re: [b2g] Can we deprecate packaged apps?

2013-07-10 Thread Salvador de la Puente González
Hi On 10/07/13 10:45, Antonio M. Amaya wrote: On 10/07/2013 10:09, Salvador de la Puente González wrote: Hello! On 09/07/13 23:13, Antonio Manuel Amaya Calvo wrote: Hey all. You know, at the risk of being the discordant voice here, I don't see what the issue with packaged apps is. It's not l

Re: [b2g] Can we deprecate packaged apps?

2013-07-10 Thread Antonio M. Amaya
On 10/07/2013 10:09, Salvador de la Puente González wrote: Hello! On 09/07/13 23:13, Antonio Manuel Amaya Calvo wrote: Hey all. You know, at the risk of being the discordant voice here, I don't see what the issue with packaged apps is. It's not like you're required to use packaged app if you w

Re: [b2g] Can we deprecate packaged apps?

2013-07-10 Thread Salvador de la Puente González
Hello! On 09/07/13 23:13, Antonio Manuel Amaya Calvo wrote: Hey all. You know, at the risk of being the discordant voice here, I don't see what the issue with packaged apps is. It's not like you're required to use packaged app if you want do develop a non special-api-using app. You can just dev

Re: [b2g] Can we deprecate packaged apps?

2013-07-10 Thread Peter Dolanjski
Hello all, I don't have much to add in the way of implementation suggestions, but I do want to make a few points from an overall product and end user perspective. (much of this is probably well known to this list, but it may spark some further thought) As was already mentioned, it is importa