Excitement - example primary working on FirefoxOS

[Shane Tomlinson]

I have the example/dev primary working on a FirefoxOS device, not just
the emulator. This is the full flow, including redirects. No error
screens. Next up - testidp and eyedee.me.

Shane

[Lloyd Hilaiel]

On May 22, 2013, at 4:02 AM, Shane Tomlinson <stoml...@mozilla.com> wrote:

> I have the example/dev primary working on a FirefoxOS device, not just the emulator. This is the full flow, including redirects. No error screens. Next up - testidp and eyedee.me.

Woah, awesome! How did you accomplish this? Specifically, how do you request resources cross domain?

lloyd

[Shane Tomlinson]

I didn't have to do anything special when working with the example IdP
and example RP. Working with services out in the wild is proving to be
trickier. testidp.org blows up whenever trying to write to
sessionStorage. I haven't figured out exactly where eyedee.me is falling
over just yet.

Shane

[Ben Adida]

Shane,

Fascinating, I didn't think it was possible for it to work out of the box
without some serious tweaking. You and Jed should go heads down and
identify remaining issues. Very nice work!

-Ben

> ______________________________**_________________
> dev-identity mailing list
> dev-id...@lists.mozilla.org
> https://lists.mozilla.org/**listinfo/dev-identity<https://lists.mozilla.org/listinfo/dev-identity>
>

[Jedediah Parsons]

I think some of our primaries are going to work due to the accident that they share the persona.org subdomain (so this I think would be why bigtent kinda works), but b2g will refuse to allow non-persona.org primaries to load persona.org scripts in our system app context; the csp rules are quite draconian. The rulesets are also additive, so I can't add an exception. At least I couldn't when I tried once before; I will double-check.

We may need to figure out a way to give the system app a pass on *.persona.org in the csp filter.

_______________________________________________
dev-identity mailing list
dev-id...@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-identity

[Shane Tomlinson]

So. CSP isn't restricting. I have eyedee.me and testidp.org working -
full flow. More work to minimize the changeset coming.

Shane

On 22/05/2013 11:02, Shane Tomlinson wrote:
> I have the example/dev primary working on a FirefoxOS device, not just
> the emulator. This is the full flow, including redirects. No error
> screens. Next up - testidp and eyedee.me.
>

> Shane

[Jedediah Parsons]

I had pretty much lost all hope on this. I am astounded by your ingenuity, Shane, as always.

I'm looking forward to finding out how you're pulling this off. When I sign in with eyedee.me on device (using the UI Tests page), b2g throws a CSP error:

E/GeckoConsole( 7656): Security Error: Content at https://eyedee.me/ may not load data from https://all-together-now.personatest.org/sign_in#NATIVE.

But it goes ahead and logs me in anyway with an assertion issued by eyedee.me. Wha???

----- Original Message -----
From: "Shane Tomlinson" <stoml...@mozilla.com>
To: dev-id...@lists.mozilla.org
Sent: Wednesday, May 22, 2013 11:03:39 AM
Subject: Re: Excitement - example primary working on FirefoxOS

[Ben Adida]

On Wed, May 22, 2013 at 2:58 PM, Jedediah Parsons <jpar...@mozilla.com>wrote:

>
> I had pretty much lost all hope on this. I am astounded by your
> ingenuity, Shane, as always.
>

As am I, nice work work Shane! Would love to hear what tricks you pulled,
especially to complete the flow at the end.

-Ben