Confirmed users
282
edits
Identity/Firefox Accounts/SSO: Difference between revisions
Jump to navigation
Jump to search
Identity/Firefox Accounts/SSO (view source)
Revision as of 01:30, 21 November 2013
, 21 November 2013→Force Authentication aka "who is using this phone right now?"
| Line 69: | Line 69: | ||
TODO: Cover the error case where a user is logged into the phone, but we can't generate an assertion for some reason (e.g., error or can't refresh expired cert because of no network). | TODO: Cover the error case where a user is logged into the phone, but we can't generate an assertion for some reason (e.g., error or can't refresh expired cert because of no network). | ||
== Force Authentication aka "who is using this phone right now?" == | == Force Authentication aka "who is using this phone right now?" == | ||
Apps may require a "fresh authentication" flow after the user has logged in with her FxA. This is often called "force authentication". | |||
Use cases: | |||
* User is in Marketplace making a purchase. | |||
* User is trying to disable WMF. | |||
* User is trying to log out of her FxA after enabling WMF. | |||
TODO: Document how this would work. | |||
Server side support being designed here: https://github.com/mozilla/fxa-auth-server/issues/307 | |||
== Other Requirements == | == Other Requirements == | ||