Re: Sync-dev Digest, Vol 47, Issue 10

2017-06-25 Thread Ryan Kelly
Hi Chris, Sorry for the unexpected breakage here. We apply a number of checks to the incoming /account/login authentication request, and reject any that seem "unexpected" across a variety of measures. I'm not going to go into any more detail here on the public list because I don't want to encour

Re: Sync-dev Digest, Vol 47, Issue 10

2017-06-25 Thread Richard Newman
Let's try dev-fxacct for this question. -R On Sun, Jun 25, 2017 at 10:34 AM, Chris Tybur wrote: > Gabriel: > > Thanks for the suggestion. I was hoping to avoid having to incorporate an > entirely new way of doing the authentication, if possible. > > I should also mention that what I had working

Re: Sync-dev Digest, Vol 47, Issue 10

2017-06-25 Thread Chris Tybur
Gabriel: Thanks for the suggestion. I was hoping to avoid having to incorporate an entirely new way of doing the authentication, if possible. I should also mention that what I had working before April was to POST to account/login, then I'd receive an email with a link asking to verify my identity

Re: Change to FxA login API for other clients

2017-06-25 Thread Chris Tybur
Gabriel: Thanks for the suggestion. I'd like to avoid having to incorporate an entirely new way of doing the authentication, if I can help it. I should also mention that what I had working before April was to POST to account/login, then I'd get an email with a link asking to verify my identity. I

Re: Change to FxA login API for other clients

2017-06-25 Thread Gabriel Ivașcu
On Sun, Jun 25, 2017 at 4:35 AM, Chris Tybur wrote: > I have a web app that uses the Firefox Account login API to authenticate my > account, obtain Sync storage encryption keys, then pull down my sync'ed > bookmarks. Around April the login stopped working and started returning "The > request was b