Fwd: MozReview now uses Bugzilla's auth delegation

[Patrick Brosset]

In case you're not on the dev-platform mailing list and if you are using
mozreview, take note of the following message:

---------- Forwarded message ----------
From: Mark Côté <mc...@mozilla.com>
Date: Wed, Aug 26, 2015 at 7:36 PM
Subject: MozReview now uses Bugzilla's auth delegation
To: dev-pl...@lists.mozilla.org


tl;dr We improved the authentication system in MozReview. Please log
out (if necessary) and back into the MozReview UI (Review Board) before
pushing any commits up for review.

Today we deployed a change to MozReview's authentication system. Rather
than logging into Review Board with your Bugzilla credentials, you'll
now be redirected to Bugzilla to log in. After you log in, or
immediately if you already have an open Bugzilla session, you'll be
redirected back to MozReview, and an API key will be sent in the
background. This API key is listed in your Bugzilla Preferences and can
be revoked at any time if you no longer want to use MozReview, or if you
want to generate and use a new one for some reason. You'll also get an
email notifying you that an API key has been created.

Note that, in addition to being more secure, this fixes the known,
annoying problem of being periodically logged out of MozReview.

You'll have to log into the UI before you publish review requests for
reviewer detection to work, since all communication between the
MozReview server and Bugzilla now uses API keys. We had one report that
the user seemed to still be logged in after the deployment today; if
that happens, please log out and back in again. We apologize for this
inconvenience and for not announcing that part earlier.

API-key support on the command line is nearly finished (see bug
1198087), after which MozReview will no longer need your password nor
cookies at all.

See my previous post for more info:
https://mrcote.info/blog/2015/08/04/mozreview-auth-changes/

Mark
_______________________________________________
dev-platform mailing list
dev-pl...@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform