Hello, On Tue, Aug 25, 2015 at 7:38 AM, Ryan Kelly <[email protected]> wrote:
> On 21/08/2015 17:30, Tommy Kuo wrote: > >> Do you want to display the pocket website, make calls to the pocket API, > >> or both? Will you be running from a privileged system app or an > >> installable webapp? > > > > We want to use the Pocket API only in a privileged app. We’ll integrate > > Pocket service into our TV. > > > >> I'm not very familiar with the mozId API. Can you use it to generate > >> assertions for any audience? From what I can see in [3] it's only > >> possible to generate assertions for your app origin. > > > > I’m trying to decode the assertion generated from FindMyDevice. I found > > audience is "https://find.firefox.com”, so I think we can generate any > > audience in the assertion. > > > > If we can use the native mozId API, it is convenient to users that they > > don’t need to enter their username/password again. And we can exchange > > the assertion for a FxA OAuth token or a Pocket access token. Do you > > know someone is familiar with mozId? > > Casting a wide net here... > > IIRC Jared Hirsch (cc'd) did some work on it a while ago, but the code > hasn't been very active for some time. Fernando Moreno and Michiel de > Jong (also cc'd) are working on some Firefox Accounts integrations in > FxOS so they might be able to offer some insight. > > Jared, Fernando, Michiel, there's extra context below, but the broad ask > here is that Tommy's team would like to connect to Pocket from Firefox > OS, and Pocket authenticates using the FxA OAuth API. > > Do you know of any existing code in Firefox OS that's using the FxA > OAuth APIs? > I played with [1] a few months ago while working on a prototype for the New Gaia Architecture project [2], but AFAIK there is no any other existing FxOS code using the FxA OAuth APIs. > If not, a more specific question that would let us work towards that is: > can a privileged app use the mozId API to produce a FxA assertion for > any target audience? > > Yes, you should be able to specify any target audience with some restrictions. Check [3]. I think in your case your Pocket app will be shipped as a certified app, so you should be able to use mozId the same way FindMyDevice does. Cheers, / Fernando [1] https://github.com/mozilla/fxa-relier-client [2] https://github.com/fxos/contacts [3] https://mxr.mozilla.org/mozilla-central/source/dom/identity/nsDOMIdentity.js#617
_______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct
