QA/Browser Technologies/Services/Releases/BrowserID 01182012

Areas for QA Focus

• TBD for next train

Information

• Train 19: 01-18-2012

Links

• Bugs/Issues: https://github.com/mozilla/browserid/issues
• Test Plan: https://wiki.mozilla.org/QA/BrowserID/TestPlan
• Weekly Train Wiki: https://wiki.mozilla.org/QA/BrowserID/BrowserID_Weekly_Trains_Beta
• Stage Test Wiki: internal site TBD
• Stage Server: https://diresworb.org
• Stage Client/RP1: http://beta.myfavoritebeer.org
• Stage Client/RP2: http://beta.myfavoritebooze.org
• Stage Client/RP3: http://beta.myfavoriteshow.org
• Stage Client/RP4: http://carrera.databits.net:9999
• Primary 1: https://eyedee.me

• New Dev Server: https://dev-browserid.services.mozilla.com
• New Dev Client: http://beer.mtv1.dev.svc.mozilla.com

• Old Dev Server: https://dev.diresworb.org
• Old Dev Client/RP1: http://dev.myfavoritebeer.org
• Old Dev Client/RP2: http://dev.myfavoritebooze.org
• Old Dev Client/RP3: http://dev.myfavoriteshow.org
• Primary 1: https://eyedee.me

Deployment Ticket

• bug 719243 - QA and deploy BrowserID train-2012.01.18 to production

OPs Ticket and ChangeWindow

• bug 721455 - Deploy localized browserid to stage
• https://intranet.mozilla.org/Services/Ops/ChangeWindow_20120201
• https://intranet.mozilla.org/Services/Ops/ChangeWindow_20120202

Hot Fixes

• HotFix 1
  • [BrowserID issue 972] : [regression] 'Always sign in with this email' doesn't persist login across browser restarts
• HotFix 2
  • [BrowserID issue 848] : A dialog with unresponsive buttons is opened when confirming an email from a secondary browser
  • [BrowserID issue 973] : Mobile: Trouble verifying email using remote browser
  • [BrowserID issue 1026] : completing registration in a browser other than the initiating browser results in non-functional dialog

ChangeLog

• 01/18: ChangeLog including issues resolved:
  • https://github.com/mozilla/browserid/blob/train-2012.01.18/ChangeLog#L1-12

Versions

• old Dev: https://dev.diresworb.org/ver.txt
  • 5cafba4 Wrapping public websites layout in gettext so 100% of the dialog flows are i18n
• Prod: https://browserid.org/ver.txt
  • 0051864 update version and ChangeLog with memory leak hotfix for train-2012.01.05
• new Dev: https://dev-browserid.services.mozilla.com/ver.txt
  • f8c2efd merge hotfix for issue #754 into beta: train-2011.12.08
• Stage: https://stage-browserid.services.mozilla.com/ver.txt
  • ab55a68 update changelog and browserid.spec for 2012.01.18

Heartbeat

• old Dev: https://dev.diresworb.org/__heartbeat__
  • ok
• old Prod: https://browserid.org/__heartbeat__
  • ok
• Dev: https://dev-browserid.services.mozilla.com/__heartbeat__
  • ok
• Stage: https://diresworb.org/__heartbeat__
  • ok

Processes

• webheads
  • /usr/bin/node bin/browserid
  • /usr/bin/node bin/verifier
  • /usr/bin/node /opt/browserid/lib/verifier/verifier-compute.js
  • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
• secure webheads
  • /usr/bin/node bin/dbwriter
  • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
• keysigners
  • /usr/bin/node bin/keysigner
  • /usr/bin/node /opt/browserid/lib/keysigner/keysigner-compute.js
• databases: various mysql processes
• zeus: various zeus processes

Logs

• webheads: /var/log/browserid/
  • browserid.log
  • browserid-metrics.json
  • verifier.log
  • verifier-metrics.json
  • verifier-compute.log
• secure webheads: /var/log/browserid/
  • dbwriter.log
• keysigners have /var/log/browserid/
  • keysigner.log
  • keysigner-compute.log
• databases: n/a
• zeus: various logs

Unit Tests

• Front-End Unit Tests
  • Pass
• Back-End Unit Tests
  • Pass
• Headless Front-End Unit Tests
  • Pass

New/Updated OPs Tickets and Issues

• bug 716940 - increase ephemeral port range on BrowserID webheads and load generation machines
• bug 713812 - re-enable puppet on sign*.idkeysign*.scl2
• bug 715708 - browserid: register new user fails the first time?
• bug 709941 - graphs needed for new metrics reported through statsd on browserid
• bug 712803 - browserid: build proxy service

New/Updated Security Tickets and Issues

• bug 665057 - Design and implement crypto API for Mozilla ID

New/Updated APPs Tickets and Issues

• bug 701424 - Switch authentication to BrowserID for etherpad.mozilla.org
• bug 721883 - Unable to sign into Apps Developer Preview with an iPhone

New/Updated Labs Tickets and Issues

• bug 720860 - https://myapps.mozillalabs.com/jsapi/include.js causes Cert Warnings in Android 2.2

New/Updated Localization Tickets and Issues

• bug 706572 - Document best practices for localizing node.js services

Resolved/Closed Bugs and Issues

• [BrowserID issue 299] : diresworb.org never syncs with beta.myfavoritebeer.org to get the my account button.
• [BrowserID issue 341] : Update new design to work with mobile
• [BrowserID issue 345] : Safari error:'Viewport argument value "device-width;" for key "width" not recognized. Content ignored.'
• [BrowserID issue 373] : Where are the Back and Cancel buttons?
• [BrowserID issue 439] : The behavior when confirming an email while signing up from diresworb.org should be consistent with the one when doing it from the client
• [BrowserID issue 443] : Enforcing better passwords
• [BrowserID issue 449] : IOS5 - "How It works" link does not work
• [BrowserID issue 451] : Pancake/IOS - Help does not fit in the signin window for iOS 5 apps
• [BrowserID issue 584] : Design is not adapted to mobile on Android
• [BrowserID issue 622] : Erred dialog flickered when selecting the "This is not me" link
• [BrowserID issue 630] : Clicking "This is not me" on an RP prevents Sign Out on Diresworb.org
• [BrowserID issue 699] : Reset password truncates email
• [BrowserID issue 710] : "This browser is not supported" is poorly formatted in mobile browsers
• [BrowserID issue 712] : When trying to access http://diresworb.org from Opera, it doesn't get redirected to https
• [BrowserID issue 728] : Support Center link should open a new tab/window
• [BrowserID issue 752] : IE9/Win7 - Logout of beta.myfavoritebooze.org then page refresh shows previous login info.
• [BrowserID issue 753] : IE8 has been reblocked
• [BrowserID issue 761] : implement primary support
• [BrowserID issue 768] : repair .channel internal API in dev
• [BrowserID issue 770] : New User Sign In Flow - No Way Back
• [BrowserID issue 775] : Additional step for Vagrant box: npm install
• [BrowserID issue 777] : BrowserID doesn't allow login at all from Native Fennec
• [BrowserID issue 778] : BrowserID is causing crashes with nightly Java Fennec
• [BrowserID issue 781] : The Cancel button on the Add Email dialog is non-responsive in Firefox 9
• [BrowserID issue 784] : load_gen: Investigate unusual spike in errors during low/med level load test
• [BrowserID issue 787] : load_gen: Fix code to better handle failures due to up-front overloading
• [BrowserID issue 790] : IE8: Can not directly sign into beta.myfavoriteshow.org
• [BrowserID issue 802] : Remember to refresh a page when signing up from diresworb.org
• [BrowserID issue 805] : IE8: First attempt to complete Sign In to an RP fails
• [BrowserID issue 815] : Android: clicking the email address fires the App launcher
• [BrowserID issue 818] : Confusing message displayed when trying to add to BID an email address already associated to it
• [BrowserID issue 827] : IE8/WinXP - cannot authenticate to dev.diresworb.org
• [BrowserID issue 831] : JavaScript errors in IE7
• [BrowserID issue 832] : Feature encrypt session cookie
• [BrowserID issue 833] : sporadic test failures in verifier-test
• [BrowserID issue 836] : load_gen: Re-fix usage information
• [BrowserID issue 838] : load_gen: sporadic 400s during med-sized load test
• [BrowserID issue 848] : A dialog with unresponsive buttons is opened when confirming an email from a secondary browser
• [BrowserID issue 850] : The bolded text from the diresworb "We sent an email..." message is not displayed right being almost unreadable
• [BrowserID issue 851] : Get errors running Headless unit tests on local install
• [BrowserID issue 861] : remove vagrant files and documentation
• [BrowserID issue 889] : Safari 5.0.4 on Windows 7 Home Premium crashes on front end unit tests.
• [BrowserID issue 890] : IE8: myfavoriteshow looks bunk
• [BrowserID issue 899] : cache EJS templates instead of creating new ones where possible.
• [BrowserID issue 901] : XHR errors on long pages (privacy/TOS) put the error at the top of the screen.
• [BrowserID issue 909] : primary support - move away from return_to
• [BrowserID issue 910] : ETag needed on sign_in
• [BrowserID issue 929] : XP/IE8: main Dev and Stage sites now rendered in black background
• [BrowserID issue 932] : problems using stage environment
• [BrowserID issue 933] : "Check Your Email" not displayed on new-user sign in
• [BrowserID issue 934] : "Check Your Email" not displayed on email addition
• [BrowserID issue 935] : "Check Your Email" not displayed on in-dialog "forgot your password"
• [BrowserID issue 936] : Dev: dbwriter dies on `stage_email` call
• [BrowserID issue 939] : must compress resources on diresworb.org
• [BrowserID issue 945] : Dev: Locale: IE8 and IE9 do not support Esperanto directly
• [BrowserID issue 956] : IE8: Provisioning with primary required email causes "stop this script?" warnings.
• [BrowserID issue 958] : IE8: Exception thrown before redirecting to IdP
• [BrowserID issue 964] : Incorrect IdP address shown when user needs to authenticate with IdP
• [BrowserID issue 972] : [regression] 'Always sign in with this email' doesn't persist login across browser restarts
• [BrowserID issue 973] : Mobile: Trouble verifying email using remote browser
• [BrowserID issue 1026] : completing registration in a browser other than the initiating browser results in non-functional dialog
• [BrowserID issue 682] : loadgen attached bogus certs to email addresses
• [BrowserID issue 707] : User.getAssertion throws exception if email address' keypair is out of date.
• [BrowserID issue 713] : diresworb.org is operating in development mode
• [BrowserID issue 717] : Android: Submit button not working, second tap results in empty assertion
• [BrowserID issue 720] : http://beta.myfavoriteshow.org/ does not check for valid email address
• [BrowserID issue 721] : When channel initialization fails, addons have to use private API to call controller.
• [BrowserID issue 723] : Sign in doesn't work on Android devices
• [BrowserID issue 733] : Justify asking for a password
• [BrowserID issue 741] : Unresponsive script avoids Sign Up
• [BrowserID issue 743] : http://www.nightlight.ws/ giving relay frame not found
• [BrowserID issue 750] : BrowserID should allow login from N emails with user's 1 password
• [BrowserID issue 795] : Error including browserid.org/include.js
• [BrowserID issue 797] : UX on first page with regards to edit/remove buttons
• [BrowserID issue 859] : Upgrade license to MPL 2.
• [BrowserID issue 877] : privacy and ToS in BrowserID popup
• [BrowserID issue 965] : Cannot use eyedee.me with local dev.

Verified As Still Open, Reopened, or Updated : Server

• [BrowserID issue 406] : Pressing Ctrl+C with the email field focused returns the user to a previous BrowserID Signing in dialog
• [BrowserID issue 708] : can't sign-in with stock browser on android
• [BrowserID issue 751] : Bad SSL Cert for https://beta.myfavoritebeer.org
• [BrowserID issue 759] : email reset / password recovery is not good
• [BrowserID issue 773] : The user is not logged out of http://beta.myfavoritebooze.org after clearing all the browsing data
• [BrowserID issue 791] : Opera/Chrome: is not honoring the "keep me signed in" feature
• [BrowserID issue 888] : When getting address_info, show a wait indicator
• [BrowserID issue 905] : The Sign In button becomes unresponsive when loosing your internet connection

Verified As Still Open, Reopened, or Updated : Client

• None

Opened Bugs/Issues For This Week: Server

• [BrowserID issue 928] : Local installs: clean up ver.txt error on start up
• [BrowserID issue 929] : XP/IE8: main Dev and Stage sites now rendered in black background
• [BrowserID issue 945] : Dev: Locale: IE8 and IE9 do not support Esperanto directly
• [BrowserID issue 949] : Dev: Locale: Header and Footer of Sign In page not localized
• [BrowserID issue 952] : diresworb.org: Left on wrong page after deleting an account
• [BrowserID issue 973] : Mobile: Trouble verifying email using remote browser
• [BrowserID issue 974] : IE8: Flashing screen debris signing into beta.myfavoriteshow.org
• [BrowserID issue 975] : How to sign out of EyeDee.Me if signed in on-the-fly
• [BrowserID issue 976] : iOS: insanely long delay signing in with new email
• [BrowserID issue 977] : Locale: Reconsider locale info message for every Get call
• [BrowserID issue 978] : iOS: Getting flash of email verification pop-up during first sign in of new account
• [BrowserID issue 986] : Android: tapping the name/email in the RP starts the App launcher
• [BrowserID issue 994] : Dev: Locale: only partial localization on main site
• [BrowserID issue 995] : Dev: Locale: input fields appear to be "translated" as well to right-justified
• [BrowserID issue 996] : Dev: Locale: verification email is only partially translated
• [BrowserID issue 1007] : Remove references to include.orig.js in all BID files
• [BrowserID issue 1008] : Consider upgrading Node on Stage and Prod to grab Beta npm release.
• [BrowserID issue 1010] : Locale: Verification emails should be completely localizable
• [BrowserID issue 1017] : BID now requires expat libs to (local) install
• [BrowserID issue 1019] : Backend Unit Tests failing on local installs
• [BrowserID issue 932] : problems using stage environment
• [BrowserID issue 937] : load_gen memory growth and utimate out-of-memory failure.
• [BrowserID issue 954] : IE9/win7 showing some pauses (CPU spikes) when doing STR in GH-935
• [BrowserID issue 972] : [regression] 'Always sign in with this email' doesn't persist login across browser restarts
• [BrowserID issue 984] : Clicking on 'use another email address' after 'reset password' returns to wrong screen
• [BrowserID issue 985] : IE8: Logout link _completely_ invisible/undiscoverable on beta.myfavoritebeer.org
• [BrowserID issue 1011] : bin/browserid on stage webhead dies on network issue
• [BrowserID issue 1015] : UI confusing for password change when using primary and secondary accounts
• [BrowserID issue 1016] : sign_in dialog: cancel button unresponsive after cancelling out of primary authentication page
• [BrowserID issue 966] : Users don't always get enough time to read the "Address verified" message
• [BrowserID issue 967] : After the user cancels signing into the primary, the buttons from the BID dialog become unresponsive
• [BrowserID issue 968] : When the user cancels a log in, the email is still marked as most recently used
• [BrowserID issue 969] : Print the correct URL for where the user is being redirected to.
• [BrowserID issue 1012] : Feature request: Test Users for use in automated testing

Opened Bugs/Issues For This Week: Client

• None

Other Open Bugs

• [BrowserID issue 879] : Email for db-LB locale is garbled
• [BrowserID issue 880] : basic profile (name+avatar) UI
• [BrowserID issue 881] : rebrand
• [BrowserID issue 882] : heuristics review of mobile experience
• [BrowserID issue 883] : shared computer challenges
• [BrowserID issue 884] : public computer challenges
• [BrowserID issue 885] : copy/branding of sign in buttons on RPs
• [BrowserID issue 886] : move to the popup the burden of explaining legacy -> BID account conversion
• [BrowserID issue 887] : auth with primaries
• [BrowserID issue 888] : When getting address_info, show a wait indicator
• [BrowserID issue 889] : Safari 5.0.4 on Windows 7 Home Premium crashes on front end unit tests.
• [BrowserID issue 890] : IE8: myfavoriteshow looks bunk
• [BrowserID issue 891] : IE8: border around logos in myfavoritebeer and myfavoriteshow.
• [BrowserID issue 892] : IE6/IE7 "unsupported browser" window looks terrible.
• [BrowserID issue 893] : unverified email flow UX
• [BrowserID issue 894] : unverified email implementation
• [BrowserID issue 895] : screen in popup for asking user to enter password again (re-auth)
• [BrowserID issue 896] : status.browserid.org
• [BrowserID issue 897] : Bug706572 localization v2
• [BrowserID issue 898] : Cannot log in using registered browserID email
• [BrowserID issue 899] : cache EJS templates instead of creating new ones where possible.
• [BrowserID issue 900] : Consider changing "sign in" screen on main site to use dialog.
• [BrowserID issue 901] : XHR errors on long pages (privacy/TOS) put the error at the top of the screen.
• [BrowserID issue 902] : IE9: myfavoritebooze.org will not display correctly because of font-face error
• [BrowserID issue 903] : Measure performance impact of client side Gettext
• [BrowserID issue 904] : allow outbound https traffic to be routed through proxy
• [BrowserID issue 905] : The Sign In button becomes unresponsive when loosing your internet connection
• [BrowserID issue 906] : Wrong Sign In dialog opened after the client is set as Home page and the user cancels his BID account
• [BrowserID issue 907] : Protest SOPA/PIPA in BrowserID.
• [BrowserID issue 908] : BrowserID uses Google font API, leaks aggregated user data
• [BrowserID issue 909] : primary support - move away from return_to
• [BrowserID issue 910] : ETag needed on sign_in
• [BrowserID issue 911] : include.orig.js missing
• [BrowserID issue 912] : add event-based RP API
• [BrowserID issue 913] : add email broken in dev
• [BrowserID issue 914] : IE8: myfavoritebooze shows border around BrowserID logo in footer.
• [BrowserID issue 915] : XHR Delay screen will overwrite any wait screens already shown
• [BrowserID issue 916] : dev: json_locale_data not available exception thrown from "/"
• [BrowserID issue 917] : Add cache busting check to main site.
• [BrowserID issue 918] : Link for "New to BrowserID?" on /signin is in a different location than other pages.
• [BrowserID issue 919] : lastpass thinks browserid form is insecure
• [BrowserID issue 920] : disable aggressive caching headers in dev
• [BrowserID issue 921] : Add routes for include.js and include.orig.js so that symlinks are not overwritten
• [BrowserID issue 922] : Setting up views for include.js and include.orig.js
• [BrowserID issue 923] : https policy
• [BrowserID issue 924] : Port po2json.pl to Node.js script
• [BrowserID issue 925] : remove the relativeDate code.
• [BrowserID issue 926] : Move the declaration of window.gettext and window.format into gettext.
• [BrowserID issue 927] : broken: Sign in to browserid.org with two different browsers
• [BrowserID issue 930] : IE8: Javascript errors when loading main site
• [BrowserID issue 931] : i18n - build script needs updated for main site.
• [BrowserID issue 933] : "Check Your Email" not displayed on new-user sign in
• [BrowserID issue 934] : "Check Your Email" not displayed on email addition
• [BrowserID issue 935] : "Check Your Email" not displayed on in-dialog "forgot your password"
• [BrowserID issue 936] : Dev: dbwriter dies on `stage_email` call
• [BrowserID issue 938] : Add Vary HTTP header for Accept-Language and Accept-Encoding
• [BrowserID issue 939] : must compress resources on diresworb.org
• [BrowserID issue 940] : Continuously prompted for password after logging into eyedee.me
• [BrowserID issue 941] : Fix IE8 showing a black background on the main site.
• [BrowserID issue 942] : Fix the missing "verify your email" screen by disabling the "xhr delay" screen.
• [BrowserID issue 943] : Fix IE8 showing a black background on the main site.
• [BrowserID issue 944] : Fix the missing "verify your email" screen by disabling the "xhr delay" screen
• [BrowserID issue 945] : Dev: Locale: IE8 and IE9 do not support Esperanto directly
• [BrowserID issue 946] : Should be able to hit enter to start verifying a primary email
• [BrowserID issue 947] : scroll bar appears in required email flow when verifying with primary
• [BrowserID issue 948] : Focus the "verify" button by default for verifying with a primary.
• [BrowserID issue 950] : Fix scrollbar showing in the Required Email screen if email is a primary...
• [BrowserID issue 951] : dev: required email with unauthenticated primary address no longer shows address
• [BrowserID issue 953] : Putting locale into etag recipie
• [BrowserID issue 955] : IE8: Provisioning throws exceptions
• [BrowserID issue 956] : IE8: Provisioning with Primary causes "stop this script?" warnings.
• [BrowserID issue 957] : IE8: Using the URL hash when redirecting from IdP to dialog breaks WinChan.
• [BrowserID issue 958] : IE8: Exception thrown before redirecting to IdP
• [BrowserID issue 959] : IE8: eyedee.me throws exception - console not defined.
• [BrowserID issue 960] : Screens with no input fields have element/button focused
• [BrowserID issue 961] : Fixing IE8 going into quirks mode in the provisioning page
• [BrowserID issue 962] : Fix IE8 throwing an exception before redirecting to IdP for user authentication.
• [BrowserID issue 963] : IE8 dev - cannot load dialog.
• [BrowserID issue 964] : Incorrect IdP address shown when user needs to authenticate with IdP
• [BrowserID issue 965] : Cannot use eyedee.me with local dev.
• [BrowserID issue 970] : IE8: Cannot log out of sample IdP
• [BrowserID issue 971] : IE8: In local sample IdP, after authenticating as new user, /api/whoami thinks you are the old user.
• [BrowserID issue 979] : add Cache-Control headers to prevent IE from caching api responses for in-tree testing primary
• [BrowserID issue 980] : dev.myfavoritebooze.org - 'Helpers.complete' is null or not an object
• [BrowserID issue 981] : IE8: ' not supported
• [BrowserID issue 982] : browserid doesn't seem to work if 3rd party cookies are disabled
• [BrowserID issue 983] : cancel button on browserid dialog doesn't seem to do anything
• [BrowserID issue 987] : "Go check your email" screen in required email flow has "cancel and try a new email" link
• [BrowserID issue 988] : primary_user_verified template needs gettextified
• [BrowserID issue 989] : disabling 3rd party cookies will break persistent/silent sign in.
• [BrowserID issue 990] : handle slow queries in mysql driver
• [BrowserID issue 991] : lots of screen flicker on main site in add_email_address and verify_email_address
• [BrowserID issue 992] : Tracking - technical jargon in strings
• [BrowserID issue 993] : dev server scripts/compress.sh doesn't generate zh_TW build files
• [BrowserID issue 997] : fixing duplicated strings for localization, part1
• [BrowserID issue 998] : Fix typo
• [BrowserID issue 999] : Completion of reset password from second browser does nothing with original dialog
• [BrowserID issue 1000] : Feature: Set password on new account inside dialog
• [BrowserID issue 1001] : cancel from "forgot password" does not remember entered email address
• [BrowserID issue 1002] : cancel from "verify primary" address does not remember previously entered email address
• [BrowserID issue 1003] : Clicking on "Use another address" for new user registration does not remember previously filled in email.
• [BrowserID issue 1004] : Clicking on "Use another address" for adding an email to account does not remember previously filled in email.
• [BrowserID issue 1005] : Dev: compress.sh doesn't create locale specific versoins of dialog.js
• [BrowserID issue 1006] : Dev: compress.sh doesn't create locale specific versoins of dialog.js
• [BrowserID issue 1009] : uglify step of compress.sh too slow of multiple locales
• [BrowserID issue 1013] : dev.diresworb.org/sign_in db-LB server side gettext not translated
• [BrowserID issue 1014] : Move login to SRP
• [BrowserID issue 1018] : eyedee.me provisioning appears to be case-sensitive
• [BrowserID issue 1026] : completing registration in a browser other than the initiating browser results in non-functional dialog

Notes

• This release includes support for primaries through https://eyedee.me
• This release includes (disabled) support for localization.