On 24/08/2016 21:25, Gabriel Ivașcu wrote:
> Hi,
>
> Is there any official documentation of how to interact with the new
> "sign-in confirmation" method?
It's sparse, because it re-uses the existing account verification
end-points. The flow goes like this:
* Submit credentials to /v1/account/login [1].
* For whatever reason, the server decides the request needs
additional verification. It sends the email and includes the
following fields in the response body:
{
"verified": false,
"verificationReason": "login",
"verificationMethod": "email",
[...other existing login response fields here...]
}
* The email includes a link with a verification code, in exactly
the same way as the existing account-verification email.
* When clicked, this link loads a page that submits the code
to /v1/recovery_email/verify_code [2]
That's pretty much it; for backwards-compatibility reasons we re-used as
much of the account-verification flow as possible.
Hope this helps,
Ryan
[1]
https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1accountlogin
[2]
https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#post-v1recovery_emailverify_code
> On Wed, Aug 24, 2016 at 7:27 AM, Ryan Kelly <[email protected]> wrote:
>>
>> Hi All,
>>
>> A while back, there were a couple of threads on the list about Firefox
>> Accounts blocking third-party API access for "security reasons", such as:
>>
>> https://mail.mozilla.org/pipermail/sync-dev/2016-June/001369.html
>>
>> I just wanted to close out those threads by letting you know, this block
>> should now be lifted for the majority of users. It's been replaced by
>> the new "sign-in confirmation" flow, which may be an inconvenience but
>> is certainly an improvement over an outright block!
>>
>> Hopefully this gets a few folks with custom integrations back on their
>> feet, until we figure out a broader story for "officially" integrating
>> with sync data via e.g. an OAuth flow.
>>
>>
>> Cheers,
>>
>> Ryan
>> _______________________________________________
>> Sync-dev mailing list
>> [email protected]
>> https://mail.mozilla.org/listinfo/sync-dev
_______________________________________________
Sync-dev mailing list
[email protected]
https://mail.mozilla.org/listinfo/sync-dev
