QA/Browser Technologies/Services/Releases/BrowserID 02162012

Areas for QA Focus

• [QA] Suggested areas of focus for QA:
  • normal stuff - resolved issue verification, load testing, and full regression testing
  • given issue 1129 and caching changes, check cache headers of important resources to ensure no regression.
• test failure modes with cookies disabled on all environments

• In addition, QA needs to spend time functionally testing all supported locales through desktop and mobile browsers.
• And, QA should spend some time testing various browsers with the following settings enabled/disabled:
  • Block/Unblock Pop-Up Windows
  • Allow/Not allow Third-Party Cookies

Information

• Train 21: 02-16-2012

Links

• Bugs/Issues: https://github.com/mozilla/browserid/issues
• Test Plan: https://wiki.mozilla.org/QA/BrowserID/TestPlan
• Weekly Train Wiki: https://wiki.mozilla.org/QA/BrowserID/BrowserID_Weekly_Trains_Beta
• Stage Server: https://diresworb.org
• Stage Client/RP1: http://beta.myfavoritebeer.org
• Stage Client/RP2: http://beta.myfavoritebooze.org
• Stage Client/RP3: http://beta.myfavoriteshow.org
• Stage Client/RP4: http://carrera.databits.net:9999 (needs VPN access)
• Primary 1: https://eyedee.me

• Dev Server: https://dev.diresworb.org
• Dev Client/RP1: http://dev.myfavoritebeer.org
• Dev Client/RP2: http://dev.myfavoritebooze.org
• Dev Client/RP3: http://dev.myfavoriteshow.org
• Primary 1: https://eyedee.me

Deployment Ticket

• bug 727995 - QA and deploy BrowserID train-2012.02.16 to production
• RPM: browserid-server-0.2012.02.16-1.el6_101802.x86_64.rpm

OPs Ticket and ChangeWindow

• Services Maintenance/Change Window
  • https://intranet.mozilla.org/Services/Ops/ChangeWindow_20120229

Hot Fixes

• Hot Fixes: Prod-only
  • Bug 729561 - BrowserID: Deploy hotfix to production at 1pm pacific
    • browserid-server-0.2012.02.02-5.el6_101735.x86_64.rpm
    • Addition of rebranding banner: "BrowserID is graduating: we're launching Mozilla Persona. Find out more on the identity blog."
• Hot Fixes: Dev only
  • HotFix 1:
    • 841: Present site's TOS and privacy policy to user
    • 1216: allow RP to specify tos and PP for display to user inside the browserid ...
  • HotFix 2:
    • 1176: Mobile: No longer able to Sign In using FF 12 (Aurora) or FF 13 (Nightly)
  • HotFix 3:
    • 1169: FF Mobile Beta (11.0) on droid2(2.2) cannot signin on myfavoritebeer or myfavoritebooze

ChangeLog

• 02/16: ChangeLog including issues resolved:
  • https://github.com/mozilla/browserid/blob/train-2012.02.16/ChangeLog#L1-17

Versions

• old Dev: https://dev.diresworb.org/ver.txt
  • 2ca765a Merge pull request #1161 from mozilla/issue_1160_remove_href_target
• Prod: https://browserid.org/ver.txt
  • e152d2a Adding he hu pa and sv locales
  • locale svn r101735
• new Dev: https://dev-browserid.services.mozilla.com/ver.txt
  • TBD
• Stage: https://diresworb.org/ver.txt
  • Current:
    • 8d24766 more rpm fixes: instead of pulling in all config/, just l10n-all.json
    • locale svn r102380
  • Original:
    • fffb471 document changes in train-2012.02.16, also fix broken dates in past changelog entries
    • locale svn r101802

Heartbeat

• old Dev: https://dev.diresworb.org/__heartbeat__
  • ok
• old Prod: https://browserid.org/__heartbeat__
  • ok
• Dev: https://dev-browserid.services.mozilla.com/__heartbeat__
  • TBD
• Stage: https://diresworb.org/__heartbeat__
  • ok

Processes

• webheads
  • /usr/bin/node bin/browserid
  • /usr/bin/node bin/verifier
  • /usr/bin/node /opt/browserid/lib/verifier/verifier-compute.js
  • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
• secure webheads
  • /usr/bin/node bin/dbwriter
  • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
• keysigners
  • /usr/bin/node bin/keysigner
  • /usr/bin/node /opt/browserid/lib/keysigner/keysigner-compute.js
• databases: various mysql processes
• zeus: various zeus processes

Logs

• webheads: /var/log/browserid/
  • browserid.log
  • browserid-metrics.json
  • verifier.log
  • verifier-metrics.json
  • verifier-compute.log
• secure webheads: /var/log/browserid/
  • dbwriter.log
• keysigners have /var/log/browserid/
  • keysigner.log
  • keysigner-compute.log
• databases: n/a
• zeus: various logs

Unit Tests - Local Install

• Front-End Unit Tests
  • PASS
• Back-End Unit Tests
  • PASS
• Headless Front-End Unit Tests
  • PASS

Sample Bug and Issue

• bug XXXXXX - Bug title
• [BrowserID issue XXX] : Issue title

New/Updated OPs Tickets and Issues

• bug 726629 - browserid: figure out DNS for browserid.org multi-datacenter
• bug 726614 - browserid: multi-datacenter tracking bug.
• bug 697225 - zeus: migrate production PHX, SCL2 from old standalone servers to new MSM cluster
• [BrowserID issue 1165] : some rpm build fixes
• [BrowserID issue 1177] : more rpm fixes: instead of pulling in all config/, just l10n-all.json

New/Updated Security Tickets and Issues

• None

New/Updated APPs Tickets and Issues

• bug 728382 - BrowserID IdP Server for Mozilla.com Project

New/Updated Labs Tickets and Issues

• None

New/Updated Localization Tickets and Issues

• [BrowserID issue 1132] : Improve string extraction for JavaScript and EJS
• [BrowserID issue 1135] : Pushing new locales to production
• [BrowserID issue 1145] : Fix the "sign in" and "use a different email" buttons overlapping in some languages.
• [BrowserID issue 1170] : Make client.pot & messages.pot empty file at the beginning of extract_po.sh
• [BrowserID issue 1184] : Strings
• [BrowserID issue 1188] : Almost identical strings
• [BrowserID issue 1189] : Extra space
• [BrowserID issue 1194] : Issue1170 Initialize pot file each run. Removing -j
• [BrowserID issue 1208] : Duplicate string in messages.po and client.po
• [BrowserID issue 1209] : BrowserID requires/required cookies
• [BrowserID issue 1213] : Uppercase characters shown as lowercase characters on buttons of signin dialog

Resolved/Closed Bugs and Issues

• bug 727872 - Push Afrikaans (af) localization of BrowserID

• [BrowserID issue 130] : Unclear email listing behavior in Sign-In UI with multiple emails
• [BrowserID issue 296] : IE9 cookie behavior breaks dev.diresworb.org
• [BrowserID issue 393] : Moving off browser while waiting to Remove an email causes Account Manager page to go blank.
• [BrowserID issue 623] : The "If this is a mistake..." message on the verification dialog doesn't make sense
• [BrowserID issue 716] : Resizing BrowserID dialogs doesn't work as expected
• [BrowserID issue 763] : do crypto in web worker
• [BrowserID issue 773] : The user is not logged out of http://beta.myfavoritebooze.org after clearing all the browsing data
• [BrowserID issue 785] : load_gen: Investigate "failed to auth" errors showing up at regular intervals
• [BrowserID issue 794] : Provide a way for user to specify email association of BrowserID assertions
• [BrowserID issue 810] : Dev: Account Manager password section not working right for IE8.
• [BrowserID issue 812] : Dev: issues with white on white text for IE8/WinXP
• [BrowserID issue 835] : Generic error message when authenticating with cookies disabled.
• [BrowserID issue 836] : load_gen: Re-fix usage information
• [BrowserID issue 839] : the browserid process consumes too much memory
• [BrowserID issue 840] : Shortened email displayed in browserid.org/signup page
• [BrowserID issue 844] : BrowserID logo in header of dialog_layout an image
• [BrowserID issue 845] : new user set password does not check max password length
• [BrowserID issue 846] : IE: Hang browser with iframes already in page when opening BrowserID.
• [BrowserID issue 847] : Safari 5.1.2 doesn't display the address bar of the browserid popup
• [BrowserID issue 852] : Provide a more explicit "change email address" workflow
• [BrowserID issue 854] : npm: command not found
• [BrowserID issue 858] : MDN: Not clear what to do next after setting up new browser id email address
• [BrowserID issue 863] : build a simple demonstration BrowserID primary
• [BrowserID issue 879] : Email for db-LB locale is garbled
• [BrowserID issue 888] : When getting address_info, show a wait indicator
• [BrowserID issue 891] : IE8: border around logos in myfavoritebeer and myfavoriteshow.
• [BrowserID issue 892] : IE6/IE7 "unsupported browser" window looks terrible.
• [BrowserID issue 898] : Cannot log in using registered browserID email
• [BrowserID issue 903] : Measure performance impact of client side Gettext
• [BrowserID issue 916] : dev: json_locale_data not available exception thrown from "/"
• [BrowserID issue 917] : Add cache busting check to main site.
• [BrowserID issue 923] : https policy
• [BrowserID issue 924] : Port po2json.pl to Node.js script
• [BrowserID issue 930] : IE8: Javascript errors when loading main site
• [BrowserID issue 938] : Add Vary HTTP header for Accept-Language and Accept-Encoding
• [BrowserID issue 940] : Continuously prompted for password after logging into eyedee.me
• [BrowserID issue 949] : Dev: Locale: Header and Footer of Sign In page not localized
• [BrowserID issue 951] : dev: required email with unauthenticated primary address no longer shows address.
• [BrowserID issue 955] : IE8: Provisioning with sample IdP throws exceptions
• [BrowserID issue 957] : IE8: Using the URL hash when redirecting from IdP to dialog breaks WinChan.
• [BrowserID issue 959] : IE8: eyedee.me throws exception - console not defined.
• [BrowserID issue 963] : IE8 local dev - cannot load dialog.
• [BrowserID issue 967] : After the user cancels signing into the primary, the buttons from the BID dialog become unresponsive
• [BrowserID issue 970] : IE8: Cannot log out of sample IdP
• [BrowserID issue 971] : IE8: In local sample IdP, after authenticating as new user, /api/whoami thinks you are the old user.
• [BrowserID issue 979] : add Cache-Control headers to prevent IE from caching api responses for in-tree testing primary
• [BrowserID issue 980] : dev.myfavoritebooze.org - 'Helpers.complete' is null or not an object
• [BrowserID issue 983] : cancel button on browserid dialog doesn't seem to do anything
• [BrowserID issue 985] : IE8: Logout link _completely_ invisible/undiscoverable on beta.myfavoritebeer.org
• [BrowserID issue 988] : primary_user_verified template needs gettextified
• [BrowserID issue 991] : lots of screen flicker on main site in add_email_address and verify_email_address
• [BrowserID issue 993] : dev server scripts/compress.sh doesn't generate zh_TW build files
• [BrowserID issue 996] : Dev: Locale: verification email is only partially translated
• [BrowserID issue 999] : Completion of reset password from second browser does nothing with original dialog
• [BrowserID issue 1005] : Dev: compress.sh doesn't create locale specific versoins of dialog.js
• [BrowserID issue 1017] : BID now requires expat libs to (local) install
• [BrowserID issue 1018] : eyedee.me provisioning appears to be case-sensitive
• [BrowserID issue 1019] : Backend Unit Tests failing on local installs
• [BrowserID issue 1035] : include.js not found for front end unit tests if compress.sh/compress-locals.sh not run.
• [BrowserID issue 1036] : Cancel Authentication from Primary needs handled
• [BrowserID issue 1040] : Add new locale: Greek (el)
• [BrowserID issue 1042] : Front-End Unit Tests failing/hanging on Test 447
• [BrowserID issue 1044] : Block unit testing in Stage and Prod
• [BrowserID issue 1045] : two screens shown at same time in db_LB on dev
• [BrowserID issue 1048] : Add new locale: Danish (da)
• [BrowserID issue 1049] : User with both primary and secondary accounts is incorrectly re-challenged for password
• [BrowserID issue 1051] : Removing gettext from non-user facing error messages
• [BrowserID issue 1052] : Some locales such as zh-TW have stale cancelVerify css class
• [BrowserID issue 1054] : exception in l10n code during first page load after VM provisioning
• [BrowserID issue 1056] : Not able to log into prod sites from iphone.
• [BrowserID issue 1057] : stage JS error for db_LB
• [BrowserID issue 1058] : Two new issues with the dialogs for 'forgot password' (train-2012.02.02)
• [BrowserID issue 1062] : error styles
• [BrowserID issue 1065] : Add new locales: Hebrew (he) and Hungarian (hu)
• [BrowserID issue 1067] : Consider adding BID and/or doc links to https://eyedee.me/
• [BrowserID issue 1069] : Better error logging on swebs during load test
• [BrowserID issue 1072] : text baseline alignment of 'cancel' and 'reset password' are a little off on android 2.1 stock
• [BrowserID issue 1074] : silent assertions on domains with `_` in the name fail - JSChannel
• [BrowserID issue 1079] : Cancelling the verification of a Primary email address flashes the wrong message
• [BrowserID issue 1081] : error.ejs is not gettextified
• [BrowserID issue 1082] : remove code_check from front end
• [BrowserID issue 1083] : rate limiting responses should use HTTP 429
• [BrowserID issue 1100] : layout issues on email picker screen
• [BrowserID issue 1113] : Remove altering copy case via CSS
• [BrowserID issue 1117] : [l10n] margin needed for confirmation text in /sign_in, e.g., German
• [BrowserID issue 1135] : Pushing new locales to production
• [BrowserID issue 1142] : stage env for train-2012.02.16 not working
• [BrowserID issue 1164] : Locale: Prod is not showing he, hu, or pa
• [BrowserID issue 1180] : email verification fails on browseridux.org
• [BrowserID issue 526] : long email addresses overflow to second line in pick email section on android browser.

Reopened or Updated : Server

• [BrowserID issue 423] : Sign-in popup has no scrollbars --> confusing when zoomed in
• [BrowserID issue 620] : need cache headers on all static resources
• [BrowserID issue 759] : email reset / password recovery is not good
• [BrowserID issue 801] : BrowserID: Security hole when adding an email to an existing account.
• [BrowserID issue 803] : IE8: Trying to sign into http://carrera.databits.net:9999 gets an error
• [BrowserID issue 869] : BrowserID needs to be more keyboard accessible
• [BrowserID issue 976] : iOS: insanely long delay signing in with new email
• [BrowserID issue 1044] : Block unit testing in Stage and Prod
• [BrowserID issue 1135] : Pushing new locales to production

Reopened or Updated : Client

• None

Opened Bugs/Issues For This Week: Server

• bug 725502 - window.open with dialog=yes argument in it causes weird issue
• bug 730015 - BrowserID: No longer able to Sign In using FF 12 (Aurora) or FF 13 (Nightly)

• [BrowserID issue 1164] : Locale: Prod is not showing he, hu, or pa
• [BrowserID issue 1167] : The new "requires cookies" message needs improvement.
• [BrowserID issue 1168] : Locale: Provide localized strings for new "requires cookies" message
• [BrowserID issue 1176] : Mobile: No longer able to Sign In using FF 12 (Aurora) or FF 13 (Nightly)
• [BrowserID issue 1179] : Rebranding banner looks terrible on mobile and small size browser windows
• [BrowserID issue 1217] : Privacy and TOS links on Sign In page open to the same browser window/tab.
• [BrowserID issue 1218] : Privacy and TOS links do not work correctly with older Android and stock browser
• [BrowserID issue 1139] : "frozen" error dialog shown on error in account manager page.
• [BrowserID issue 1142] : stage env for train-2012.02.16 not working
• [BrowserID issue 1169] : FF Mobile Beta (11.0) on droid2(2.2) cannot signin on (beta.?)myfavorite(beer|booze).org
• [BrowserID issue 1215] : trivial quirk with FF10, multiple languages and cache behaviour
• [BrowserID issue 1172] : The "This field must be an email address." error message is displayed when trying to sign up with and email address longer than 74 chars
• [BrowserID issue 1173] : Passwords larger than 80 chars can be used all through BID
• [BrowserID issue 1200] : BrowserID becomes unresponsive when trying to use on Firefox with all the cookies disabled
• [BrowserID issue 1201] : The diresworb.org home page displayed both the Account Manager and "Connect with BrowserID..." sections when all the cookies are disabled
• [BrowserID issue 1202] : Only the headers and footers of most diresworb.org pages are displayed when opening them in Chrome with all the cookies disabled
• [BrowserID issue 1203] : The "We are very sorry, there has been an error!" message with an unresponsive "See more info" link is displayed in several cases when all the cookies are disabled in the browser
• [BrowserID issue 1204] : Include.js returns a 304 even though it takes a while to load
• [BrowserID issue 1206] : include.js loads very slowly for the addons "My Profile" page in FF

Opened Bugs/Issues For This Week: Client

• None

Other Open Bugs

• [BrowserID issue 1133] : iOS - must click on radio button to select email address.
• [BrowserID issue 1134] : Fixing long email addresses (and some other general layout fixes) in pick_email.
• [BrowserID issue 1136] : Removing the "text-transform: lowercase" on all buttons.
• [BrowserID issue 1137] : iOS - when clicking one mail address, select radio button.
• [BrowserID issue 1138] : Changing the case of the buttons from upper to lowercase.
• [BrowserID issue 1140] : Customize Login Error if Primary is not available
• [BrowserID issue 1141] : Static resources should not generate 304s in server logs
• [BrowserID issue 1143] : Upgrading to connect-cachify 0.0.5 which has a bug fix for Issue#1141
• [BrowserID issue 1144] : Fix the extended error info not opening.
• [BrowserID issue 1146] : Default email displayed should be the same email as authenticated email
• [BrowserID issue 1147] : refactor httputils to remove needless logic and better leverage express....
• [BrowserID issue 1148] : disable /test at the app level in stage or production.
• [BrowserID issue 1149] : Fix zoom/scrolling issues across platforms.
• [BrowserID issue 1150] : Logging in to myfavoriteshow.org with an already registered e-mail address when logged in with another triggers a verification email
• [BrowserID issue 1151] : Fix the issue #871
• [BrowserID issue 1152] : Sync the e-mail list before attempting to remove an e-mail
• [BrowserID issue 1153] : Can't uncheck the persistence check box
• [BrowserID issue 1154] : To retry, try again
• [BrowserID issue 1155] : Cannot uncheck "Always sign in using this email" by clicking on label.
• [BrowserID issue 1156] : Failing front end test 'controllers/pick_email: click on an email label - select corresponding radio button'
• [BrowserID issue 1157] : EJS introduces global variables
• [BrowserID issue 1158] : Fix the pick_email test failure when all tests are run.
• [BrowserID issue 1159] : Fix EJS adding global variables.
• [BrowserID issue 1160] : remove target="<x>" from template strings.
• [BrowserID issue 1161] : Removing the href/target attributes from translated anchor tags.
• [BrowserID issue 1162] : When the user successfully authenticates, log them in automatically with out going to the email picker.
• [BrowserID issue 1163] : Re-enable unchecking the "Always sign in using this email..." checkbox.
• [BrowserID issue 1171] : phantom js tests blow up after calling set_password
• [BrowserID issue 1174] : XHR delay screen should be hooked up to main site
• [BrowserID issue 1175] : Adding more tests to make sure when the user sets a password, the min/max password lengths are checked.
• [BrowserID issue 1178] : unit tests are broken
• [BrowserID issue 1180] : email verification fails on browseridux.org
• [BrowserID issue 1181] : figure out strategy for iOS 5 reject all cookies
• [BrowserID issue 1182] : Error UI instead of Login Screen with raiseAuthenticationFailure
• [BrowserID issue 1183] : Error UI upon calling registerCertificate for Clortho primary
• [BrowserID issue 1185] : "select email" string needs changed to "sign in"
• [BrowserID issue 1186] : Changing the "pick email" string to "sign in"
• [BrowserID issue 1187] : Hotfix 1170 graduating banner
• [BrowserID issue 1190] : Removing the offline check code that was already disabled
• [BrowserID issue 1191] : Fix the redundant and circular "To retry, ... try again"
• [BrowserID issue 1192] : Remove the extra space after the : in "Finish signing into:"
• [BrowserID issue 1193] : Fix Java Fennec not opening the BrowserID dialog.
• [BrowserID issue 1195] : sign-in screen has unclear button labeling [select email]
• [BrowserID issue 1196] : logout all devices from all websites
• [BrowserID issue 1197] : verifier tests fail under travis-ci
• [BrowserID issue 1198] : Login doesn't work in an iOS Home Screen web application
• [BrowserID issue 1199] : include.js, embedded winchan needs updating, breaks IE9 testing on localhost
• [BrowserID issue 1205] : 'bad signature in chain' should clear public key cache for a primary and retry
• [BrowserID issue 1207] : Refine raiseAuthenticationFailure API
• [BrowserID issue 1210] : BrowserID dialog does not use the mobile layou
• [BrowserID issue 1211] : update database code and mysql driver to handle stalled connections
• [BrowserID issue 1212] : Enhance our use of EJS so we can keep templates DRY
• [BrowserID issue 1214] : Authentication using smartcard
• [BrowserID issue 1216] : allow RP to specify tos and PP for display to user inside the browserid ...

Notes

• List of supported locales for this release
  • "af", "ca", "cs", "da", "de", "el", "en-US", "es", "et", "eu",
  • "fi", "fr", "fy", "ga", "hr", "it", "lij", "nl", "pa", "pl",
  • "ru", "sk", "sl", "sq", "sr", "sv", "tr", "zh-CN", "zh-TW