Closed Bug 938741 Opened 11 years ago Closed 11 years ago

fxa-auth-server should support forceAuthentication for RP use

Categories

(Core Graveyard :: Identity, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED
mozilla30

People

(Reporter: spenrose, Assigned: dcoates)

References

Details

(Whiteboard: [qa?])

RPs should be able to request forceAuthentication so that, e.g., Marketplace can insist on password entry at purchase time.
Server endpoint design happening here: https://github.com/mozilla/fxa-auth-server/issues/307
Chris, is the Github discussion that you mentioned above still valid? Is the new onepw protocol supporting the forceAuth flow?
Flags: needinfo?(ckarlof)
(In reply to Fernando Jiménez Moreno [:ferjm] from comment #2) > Chris, is the Github discussion that you mentioned above still valid? Is the > new onepw protocol supporting the forceAuth flow? Yes, it's still valid but needs to be updated. If the rough idea here https://github.com/mozilla/fxa-auth-server/issues/307#issuecomment-28598232 is acceptable to you from a client perspective, we can vet it further, spec it out, and implement it at any time.
Flags: needinfo?(ckarlof)
Whiteboard: [qa+]
Whiteboard: [qa+] → [qa?]
(In reply to Chris Karlof [:ckarlof] from comment #3) > (In reply to Fernando Jiménez Moreno [:ferjm] from comment #2) > > Chris, is the Github discussion that you mentioned above still valid? Is the > > new onepw protocol supporting the forceAuth flow? > > Yes, it's still valid but needs to be updated. If the rough idea here > > https://github.com/mozilla/fxa-auth-server/issues/307#issuecomment-28598232 > > is acceptable to you from a client perspective, we can vet it further, spec > it out, and implement it at any time. Thanks Chris. Warner's plan looks good to me.
Assignee: nobody → dcoates
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla30
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.