QA/Browser Technologies/Services/Releases/BrowserID 05252012

From MozillaWiki
Jump to: navigation, search

Areas for QA Focus

[QA] Suggested additional areas of focus for QA:

  • All issues from previous train
  • test that deployment links sent on train-2012.04.27 still work on 2012.05.25
  • verify all recent security fixes
  • Additional areas of focus
    • Deeper testing of #1627, #1608
    • Verification links for #1592: train-2012.05.14 will break outstanding verification emails
    • Clean runs of load_gen on Stage
    • Better keyboard accessibility
    • Security fixes and improvements
    • Full FF channel testing, with extra focus on Aurora and Nightly for desktop and mobile

Information

  • Train 28: 05-25-2012

Links

Deployment Ticket

  • bug 758840 - QA and deploy BrowserID train-2012.05.25 to production

OPs Ticket and ChangeWindow

Hot Fixes and Other Deployments

  • None

ChangeLog

Travis/CI

  • Tests pass: TBD

BID Automation

See the following site: https://wiki.mozilla.org/Identity/QA#BrowserID_Automation

Versions

  • Dev: https://dev.diresworb.org/ver.txt
    • 75b5735 Merge pull request #1647 from mozilla/issue1645
  • Prod: https://browserid.org/ver.txt
    • 943d308 bump to 0.2012.04.27.5, and document changes in .4 and .5
    • locale svn r105105
  • Stage: https://diresworb.org/ver.txt
    • Orig:
    • 254b9f0 add host parameter back to mysql configuration - fixes accidental regression in commit 3f4368d2fde6f67075d218c06a393bcf80a9de67
    • locale svn r105505
    • Final:
    • 4c57ae3 Merge pull request #1691 from mathjazz/patch-9
    • locale svn r105976

Processes

  • webheads
    • /usr/bin/node bin/browserid
    • /usr/bin/node bin/verifier
    • /usr/bin/node /opt/browserid/lib/verifier/verifier-compute.js
    • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
  • secure webheads
    • /usr/bin/node bin/dbwriter
    • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
  • keysigners
    • /usr/bin/node bin/keysigner
    • /usr/bin/node /opt/browserid/lib/keysigner/keysigner-compute.js
  • databases: various mysql processes
  • zeus: various zeus processes

Logs

  • webheads: /var/log/browserid/
    • browserid.log
    • browserid-metrics.json
    • verifier.log
    • verifier-metrics.json
    • verifier-compute.log
  • secure webheads: /var/log/browserid/
    • dbwriter.log
  • keysigners have /var/log/browserid/
    • keysigner.log
    • keysigner-compute.log
  • databases: n/a
  • zeus: various logs

Local Install - Unit Tests

  • Front-End Unit Tests: PASS
  • Back-End/Headless Unit Tests: PASS

Local Install - Load Test

  • Set 1
    • Term1: CREATE_TEST_USERS=2000 BROWSERID_FAKE_VERIFICATION=1 NODE_ENV=test_mysql nohup npm start
    • Term2: nohup bin/load_gen -u 1/70 -m 70000 -o -s http://127.0.0.1:10002

Stage: Load Tests

Sample Bug and Issue

New/Updated OPs Tickets and Issues

Bugzilla: https://bugzilla.mozilla.org/

  • Bug 757212 - Pencil graphs in stage not updating since evening of May 18
  • Bug 710338 - Upgrade browserid.org SSL cert to EV or crazypants good level
  • Bug 708321 - browserid: configure zeus service protection classes
  • Bug 755795 - New DNS & SSL certs for the BrowserID rebrand
  • Bug 757705 - EV SSL cert for login.persona.org & related domains
  • Bug 759251 - add an alarm to watch for uncaught exceptions in BrowserID
  • Bug 759613 - deploy idproxy changes
  • Bug 749089 - bid: set up an idproxy in stage
  • Bug 757556 - stage: build and puppet idproxy, nameserver VMs
  • Bug 760627 - crash in dbwriter
  • Bug 756008 - rebuild idproxy in phx1 as rhel6
  • Bug 753068 - switch idproxy to use firefox's cacert bundle, and publish this fact

https://github.com/mozilla/browserid/issues

  • None

New/Updated APPs Tickets and Issues

Bugzilla: https://bugzilla.mozilla.org/

  • Bug 759452 - Persona passwords are not remembered
  • Bug 755232 - Can not log in due to browser id internal error 500
  • Bug 753238 - Create a shared Identity.jsm module

New/Updated Labs Tickets and Issues

Bugzilla: https://bugzilla.mozilla.org/

  • Bug 760176 - Pull recent sign-ins for % of IE 8 users

New/Updated Localization Tickets and Issues

Bugzilla: https://bugzilla.mozilla.org/

  • None

GitHub: https://github.com/mozilla/browserid/issues

  • 1686: Ukranian (uk) not showing on l10n preview
  • 1687: Update production locales for train-2012.05.25
  • 1691: Include all locales that we ever shipped

Resolved/Closed Bugs and Issues

Bugzilla: https:/bugzilla.mozilla.org/

  • None

GitHub: https://github.com/mozilla/browserid/issues

  • 604: end to end email delivery testing
  • 791: Opera/Chrome: is not honoring the "keep me signed in" feature
  • 1267: vert/horiz scrollbars when doing required email with eyedee.me address
  • 1418: signup/signin/forgot pages from main site should check for cookies
  • 1557: If user types wrong password in verify email screen, error dialog is displayed
  • 1592: train-2012.05.14 will break outstanding verification emails
  • 1596: update load_gen for the changes to jwcrypto
  • 1597: uploaded interaction data not always sending lang, timestamps, etc.
  • 1599: code cleanup for old existing field in stage table
  • 1602: dev: in-tree example primary is broken
  • 1613: whitelist which fields are sent to backend in KPI data.
  • 1627: improve parameter-escaping
  • 1643: implement final property names in API

GitHub: https://github.com/mozilla/123done/issues

  • None

Reopened or Updated

GitHub: https://github.com/mozilla/browserid/issues

  • 1555: User has to type password 4 times when confirming on browser other than initiator
  • 1582: "Is this your computer" screen is not keyboard navigable.

Opened Bugs/Issues For This Week

GitHub: https://github.com/mozilla/browserid/issues

  • 1667: Orphaned dialog KPI
  • 1668: Abandonment KPI
  • 1676: Can not log into beta.123done.org on older Android device
  • 1653: new test for GH-1631; non-ascii in password
  • 1658: update MDN doc for new 'privacyPolicy' and 'termsOfService' parameters
  • 1659: if rp specifies all of privacyPolicy,termsOfService and the old params, the old params trump the new
  • 1660: server timestamp no longer in KPI blob (with event_stream, lang, sample_rate, screen_size).
  • 1661: locking the email field between pressing next and password field showing up
  • 1666: load_gen crash during problems with load balancer in stage.
  • 1675: second password field in 'forgot password' flow is labelled 'reset password'
  • 1677: cannot add secondary back to a primary-only account that previously had a secondary email in the account
  • 1679: /forgot page: email address field not disabled and has keyboard focus
  • 1682: Fennec FF10 XUL android - after verifying email address, /signup redirects to /signin
  • 1690: chrome 19 on windows shows "Untitled" for window titlebar.

GitHub: https://github.com/mozilla/123done/issues

  • None

Other Open Bugs and Issues

Bugzilla: https://bugzilla.mozilla.org/

  • None

GitHub: https://github.com/mozilla/browserid/issues

  • 1639: Consider putting link to complete registration in email header
  • 1640: Make the in dialog set-password flow work with requiredEmail.
  • 1641: Fix the tab order on the signup page.
  • 1642: dev: scripts/compress is broken
  • 1643: implement final property names in API
  • 1644: support final property names in .request() API - issue #1643
  • 1645: dead code: code update handler
  • 1646: validate hash-delivered email addresses
  • 1647: Issue1645 - remove dead code
  • 1648: increase authenticated session duration to 4 weeks (was effectively 1 week): issue #1632
  • 1649: Support non-ascii passwords: when forwarding requests, Content-Length should be byte length, not number of unicode chars. issue #1631
  • 1650: restore include.js license header and links to un-minified source: issue #1624
  • 1651: rework uncaught exception handling: log an error, don't bring the process down, bump a statsd counter: issue #1558
  • 1652: compress-worker regexp for embeded URLs in CSS does not handle multiple background-images per declaration
  • 1654: Fix not being able to have multiple background images per CSS declaration.
  • 1655: Tracking: license may be needed on all served production resources.
  • 1656: Rebrand
  • 1657: Router layer
  • 1662: static-resource-test.js is failing
  • 1663: Fix the failing static-resource-test.
  • 1664: Filter and namespace the interaction data.
  • 1665: integrate "BrowserID and CSP" instructions into an official documentation page
  • 1669: Prevent "development" service from starting in prod.
  • 1670: Send server timestamp along with KPI data.
  • 1671: Issue 1098 rp name logo
  • 1672: Update Readme -- VEP is dead; long live BID
  • 1673: instrument verifier failures
  • 1674: Move onto awsbox, update urls for ephemeral and dev deployments, fix email delivery for both
  • 1678: navigator.id.genKeyPair should call back with string, not object
  • 1680: Hotfix clearing expired certs are cleaned up
  • 1681: Fix globals that were being unintentionally created in wsapi.js
  • 1683: Dev
  • 1684: dev: "Communicating With Server" text is placed behind the arrow when wait screen being hidden.
  • 1685: Fix the "communicating with server" text being placed behind the arrow when the wait screen is being hidden.
  • 1688: Make sure the manage screen looks right in both landscape and portrait mode on mobile devices.
  • 1689: ensure that navigator.id behaves like a true DOM API
  • 1692: when obtaining an assertion silently, still make sure that expired certs are cleaned up

GitHub: https://github.com/mozilla/123done/issues

  • None

Notes

  • TBD