QA/Browser Technologies/Services/Releases/BrowserID 04112012

From MozillaWiki
Jump to: navigation, search

Areas for QA Focus

  • [QA] Suggested areas of focus for QA:
    • verify no regression on security issue 741814
    • all issues in changelog
    • extensive regression testing of all RPs (show/booze/beer).
    • coordinate with lloyd, and subsequent to that testing of the new API via 123done.org
  • Also:
    • All 5 Hot Fixes from the previous train
    • All 5 current Hot Fixes for this train
    • All 4 Firefox channels
    • Android/mobile
    • Cookies (standard/third-party)

Information

  • Train 25: 04-11-2012

Links

Deployment Ticket

  • bug 744689 - QA and deploy BrowserID train-2012.04.11 to production

OPs Ticket and ChangeWindow

Hot Fixes and Other Deployments

  • Hot Fix 1:
    • 1429: (hotfix 2012.04.12) return 400 rather than 500 for invalid params to stage_user or stage_email
    • 1430: (hotfix 2012.04.12) return 400 rather than 500 for invalid params to stage_user or stage_email
    • 1425: (hotfix 2012.04.12) fix broken string, "is this your computer" was broken into two fragments
  • Hot Fix 2:
    • 1442: (hotfix 2012.04.16) fix API regression that would cause javascript error when .get() invoked without second arg
    • 1436: (hotfix 2012.04.16) update load_gen to new server apis that require an `ephemeral` argument
  • Hot Fix 3:
    • 1440: (hotfix 2012.04.17) fix broken reset password flow - button was non-responsive in dialog
    • 1445: (hotfix 2012.04.17) mitigate errors seen when adding a secondary email to an acct with only primary emails
  • Hot Fix 4:
    • 1449: (hotfix 2012.04.18) fix error where under certain conditions user could see an error immediately after authenticating
  • Hot Fix 5:
    • 1464: [ie8/ie9] IE reporting a problem with test check_registration: user validation with mustAuth result
    • 1485: [IE8] error dialog shows up with solid black background (i.e., not just dimmed)
    • Various security fixes

ChangeLog

Versions

  • Dev: https://dev.diresworb.org/ver.txt
    • b36af1f try re-configuring travis-ci so we get notifications in irc.mozilla.org #identity
  • Prod: https://browserid.org/ver.txt
    • e5b7eb0 document hotfix for issue #1429 in 0.2012.03.28.7
    • locale svn r104128
  • Stage: https://diresworb.org/ver.txt
    • Final
      • 57ea50a bump version number with inclusion of final shipping locales.
      • locale svn r104778
    • Hot Fix 5:
      • (0.2012.04.08)
      • 5fc0c75 bump rpm release number
      • locale svn r104128
    • Hot Fixes 1 - 4:
      • 1613144 0.2012.04.18.7 - fix issue #1449 - whereby user logs in and immediately sees an authentication error
      • locale svn r104263
    • Original:
      • 51c9909 0.2012.04.11.3 - fix broken string that would have caused 'is this your computer' to not make sense for non-en users
      • locale svn r104263

Heartbeat

Processes

  • webheads
    • /usr/bin/node bin/browserid
    • /usr/bin/node bin/verifier
    • /usr/bin/node /opt/browserid/lib/verifier/verifier-compute.js
    • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
  • secure webheads
    • /usr/bin/node bin/dbwriter
    • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
  • keysigners
    • /usr/bin/node bin/keysigner
    • /usr/bin/node /opt/browserid/lib/keysigner/keysigner-compute.js
  • databases: various mysql processes
  • zeus: various zeus processes

Logs

  • webheads: /var/log/browserid/
    • browserid.log
    • browserid-metrics.json
    • verifier.log
    • verifier-metrics.json
    • verifier-compute.log
  • secure webheads: /var/log/browserid/
    • dbwriter.log
  • keysigners have /var/log/browserid/
    • keysigner.log
    • keysigner-compute.log
  • databases: n/a
  • zeus: various logs

Local Install - Unit Tests

  • Front-End Unit Tests: PASS
  • Back-End Unit Tests: n/a
  • Headless Front-End Unit Tests: n/a
  • Back-End/Headless Unit Tests: PASS

Local Install - Load Test

  • None on this round
    • Example:
      • Term1: CREATE_TEST_USERS=2000 BROWSERID_FAKE_VERIFICATION=1 NODE_ENV=test_mysql npm start
      • Term2: bin/load_gen -u 1/60 -m 60000 -o -s http://127.0.0.1:10002
      • or similar

Stage: Load Tests

Sample Bug and Issue

New/Updated OPs Tickets and Issues

  • bug 744892 - 500-level errors not always showing up the pencil graphs for browserid
  • bug 716940 - increase ephemeral port range on BrowserID webheads and load generation machines
  • bug 748655 - load balancer for stage-browserid2.s.m.c not accepting connection on port 80 for redirect
  • bug 748665 - only permit http->https redirects for GET requests to bid:80/tcp

New/Updated Security Tickets and Issues

  • n/a

New/Updated APPs Tickets and Issues

  • None

New/Updated Labs Tickets and Issues

  • None

New/Updated Localization Tickets and Issues

Resolved/Closed Bugs and Issues

Reopened or Updated : Server

Reopened or Updated : Client

  • None

Opened Bugs/Issues For This Week: Server

  • [BrowserID issue 1437] : Local install: Need better error messaging when email has no domain
  • [BrowserID issue 1438] : Local install RP: TOS and Privacy links do not show up unless both are checked.
  • [BrowserID issue 1439] : Local install RP: the "logout" button does not appear to do anything
  • [BrowserID issue 1499] : Can not redirect http to https on browser with clean profile and cookies disabled
  • [BrowserID issue 1469] : Confusing behavior displayed when cancelling an email addition and retrying to add the same email
  • [BrowserID issue 1474] : The user can set his current password as his new password when starting this process from the client
  • [BrowserID issue 1476] : The items under the list on the emails list dialog should not be scrollable
  • [BrowserID issue 1435] : Clear the email field when adding a different email address
  • [BrowserID issue 1436] : load_gen no longer works against stage due to new 'ephemeral' post argumen
  • [BrowserID issue 1440] : Forgot password flow fails to complete; dialog is stuck and won't process clicks
  • [BrowserID issue 1441] : [Safari/Win32] frontend unit tests flaky on second or later run
  • [BrowserID issue 1445] : 400 Bad Request: requires authentication response for POST /wsapi/cert_key
  • [BrowserID issue 1449] : 400 requires authentication received for /wsapi/list_emails
  • [BrowserID issue 1463] : Follow on from GH-1123: gracefully deal with no-op remove of already deleted account
  • [BrowserID issue 1464] : [ie8/ie9] IE reporting a problem with test check_registration: user validation with mustAuth result
  • [BrowserID issue 1472] : What should /sign_in dialog do if /wsapi/list_emails returns and empty list
  • [BrowserID issue 1478] : [chrome/win7] tiny cosmetic pixel gap in arrow in /sign_in dialog
  • [BrowserID issue 1479] : should 24-hour expiry on 'denied' state trigger 'is this your question' immediately or just set to 'seen'?
  • [BrowserID issue 1484] : exceptions thrown on /signup page when cookies disabled
  • [BrowserID issue 1485] : [IE8] error dialog shows up with solid black background (i.e., not just dimmed)

Opened Bugs/Issues For This Week: Client

  • None

Other Open Bugs

1300 BrowserID issue 1400]] : Issue title

Notes

  • (from Lloyd)
    • Next up, we branched train-2012.04.11, which includes some important features:
    • train-2012.04.11 will roll into production on the 25th of this month pending no blockers from QA or the community (uh, you guys).