Closed
Bug 938461
Opened 11 years ago
Closed 11 years ago
Detect and adjust to timeskew errors after API calls to FxAccounts API server
Categories
(Cloud Services :: Firefox: Common, defect)
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 957863
People
(Reporter: zaach, Unassigned)
References
Details
(Whiteboard: [qa+])
The client should be able to catch the error and adjust the timestamp it uses to send Hawk authenticated API calls.
API server issue on github: https://github.com/mozilla/picl-idp/pull/233
|
||
Updated•11 years ago
|
Whiteboard: [qa+]
|
||
Comment 1•11 years ago
|
||
Additional context here: https://github.com/mozilla/fxa-js-client/issues/12
And some notes on potential security implications of doing this here: https://github.com/hueniverse/hawk#future-time-manipulation
|
|
||
Comment 2•11 years ago
|
||
We're now also sending a "Timestamp" header in each response, so you can keep your clock in sync on an ongoing basis.
|
||
Comment 3•11 years ago
|
||
Zack, do you have any thoughts on what the implementation should look like?
Flags: needinfo?(zack.carter)
|
|
||
Updated•11 years ago
|
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(zack.carter)
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•