I wrote a web app some time ago that interfaces with the Mozilla Sync
1.5 API, to retrieve my Sync bookmarks on platforms that aren't
supported by Firefox (e.g. iOS). It's worked perfectly fine up until
about a week ago. Suddenly when I try to log into my app with my Sync
credentials, I get this JSON response back from Mozilla:

{"code":400,"errno":125,"error":"Bad Request","message":"Unknown
account","info":"https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#response-format","email":";<my
email addr>"}

the short
story is: for operational security reasons we have added some temporary
rules designed to prevent non-web clients from accessing the login API.

These rules have been successful in preventing a lot of fraudulent
traffic; unfortunately they've also blocked some legitimate uses such as
yours.  We're evaluating the current approach and working hard on next
steps, which I'm hopeful will allow us to lift the current restrictions
soon.


Just to close the loop here - the restrictions on logging in from non web clients have been lifted, and apps such as the above should be working again. If we find we need to impose similar restrictions in future, we'll do it with a much clearer error message rather than the confusing "Unknown account" message.


  Cheers,

    Ryan
_______________________________________________
Sync-dev mailing list
[email protected]
https://mail.mozilla.org/listinfo/sync-dev

Reply via email to