Identity/Firefox Accounts: Difference between revisions

Jump to navigation Jump to search

Identity/Firefox Accounts (view source)

Revision as of 21:37, 21 March 2014

944 bytes removed ,  21 March 2014
→‎FAQ
No edit summary
Line 32: Line 32:
==Why does Firefox Accounts require me to choose a password?==
==Why does Firefox Accounts require me to choose a password?==
The first relying service we're targeting with Firefox Accounts is Firefox Sync. Current Firefox Sync encrypts all your data in our servers, and we will continue to do so in the Firefox Accounts backed version of Sync. However, in the FxA backed version of Firefox Sync, we will encrypt your Sync data with a key derived from your Firefox Account password, instead a random key managed by the J-PAKE pairing protocol. This technique of using a password derived sync key is similar to how data protection in [https://support.google.com/chrome/answer/1181035?hl=en&ref_topic=1693469 Chrome Sync] works.
The first relying service we're targeting with Firefox Accounts is Firefox Sync. Current Firefox Sync encrypts all your data in our servers, and we will continue to do so in the Firefox Accounts backed version of Sync. However, in the FxA backed version of Firefox Sync, we will encrypt your Sync data with a key derived from your Firefox Account password, instead a random key managed by the J-PAKE pairing protocol. This technique of using a password derived sync key is similar to how data protection in [https://support.google.com/chrome/answer/1181035?hl=en&ref_topic=1693469 Chrome Sync] works.
==What is the UX for signing in to a Firefox Account?==
NOTE: This is a work in progress!
Here are some Lucidchart flow diagrams for FxA: https://www.lucidchart.com/documents/edit/4f34-ef24-52695ddf-8057-72580a00d543
===Web===
We anticipate the majority of Firefox Account sign ins and account creations will be driven by flows from Mozilla relying services, such as Firefox Marketplace. We propose relying Mozilla services present account controls and signal the FxA logged in state in the upper right corner of their Web properties:
[[File:Sign-in.png|400px]]
If a user clicks on the "Sign Up" or "Log In" button, it will take her to to a FxA page that will allow her to sign in or create an account. After completing sign in or account creation, she will be redirected back to the relying Mozilla service.
===FxOS===
TODO


==How do relying Mozilla services authenticate an FxA user?==
==How do relying Mozilla services authenticate an FxA user?==
Great question. We're still working out the details. We're first going to figure out the [https://wiki.mozilla.org/Identity/Firefox_Accounts/SSO product requirements of SSO with FxA] and go from there.
Two ways:
* BrowserID assertions
* Oauth2 (coming soon: https://github.com/mozilla/fxa-oauth-server)


==How does a user reset her Firefox Account password?==
==How does a user reset her Firefox Account password?==
Line 56: Line 44:
Persona is not intended to provide you with a new account, and it's not a new account system. Persona is a federated login protocol. You use Persona to log in to relying sites, and it's not intended that you need to "sign up" for Persona before you can use it. If you would need to sign up for anything, you would need to create an account at an IdP that supports Persona.
Persona is not intended to provide you with a new account, and it's not a new account system. Persona is a federated login protocol. You use Persona to log in to relying sites, and it's not intended that you need to "sign up" for Persona before you can use it. If you would need to sign up for anything, you would need to create an account at an IdP that supports Persona.


One *huge* confusing point about Persona today is a service called the "Persona Fallback", which serves as a proxy IdP if your actual IdP doesn't support Persona (or isn't bridged), which just about every IdP except for Google and Yahoo. In this case, you currently have to sign up for a "Persona Fallback Account" (i.e. choose a password and verify your email) to use Persona.  
One confusing point about Persona today is a service called the "Persona Fallback", which serves as a proxy IdP if your actual IdP doesn't support Persona (or isn't bridged), which just about every IdP except for Google and Yahoo. In this case, you currently have to sign up for a "Persona Fallback Account" (i.e. choose a password and verify your email) to use Persona.  


But a Persona Fallback Account is not a Persona Account, it's not the long term vision of Persona, and that's not supposed to be the happy path of the Persona login experience.  
But a Persona Fallback Account is not a Persona Account, it's not the long term vision of Persona, and that's not supposed to be the happy path of the Persona login experience.  
Line 90: Line 78:
* Firefox Marketplace
* Firefox Marketplace
* Where's My Fox?
* Where's My Fox?
* [https://wiki.mozilla.org/User:Dria/PiCL_Future_Ideas crazy future ideas]
* [https://wiki.mozilla.org/User:Dria/PiCL_Future_Ideas future ideas]


== What do these terms mean? ==
== What do these terms mean? ==
Ckarlof
Confirmed users
282

edits

Retrieved from "https://wiki.mozilla.org/Special:MobileDiff/954997"

Navigation menu