Add Evelyn Huang and Shih-Chiang Chien. -- Tommy Kuo / Software Engineer [email protected]
Mozilla Taiwan On August 25, 2015 at 21:35:26, Fernando Moreno ([email protected]) wrote: Hello, On Tue, Aug 25, 2015 at 7:38 AM, Ryan Kelly <[email protected]> wrote: On 21/08/2015 17:30, Tommy Kuo wrote: >> Do you want to display the pocket website, make calls to the pocket API, >> or both? Will you be running from a privileged system app or an >> installable webapp? > > We want to use the Pocket API only in a privileged app. We’ll integrate > Pocket service into our TV. > >> I'm not very familiar with the mozId API. Can you use it to generate >> assertions for any audience? From what I can see in [3] it's only >> possible to generate assertions for your app origin. > > I’m trying to decode the assertion generated from FindMyDevice. I found > audience is "https://find.firefox.com”, so I think we can generate any > audience in the assertion. > > If we can use the native mozId API, it is convenient to users that they > don’t need to enter their username/password again. And we can exchange > the assertion for a FxA OAuth token or a Pocket access token. Do you > know someone is familiar with mozId? Casting a wide net here... IIRC Jared Hirsch (cc'd) did some work on it a while ago, but the code hasn't been very active for some time. Fernando Moreno and Michiel de Jong (also cc'd) are working on some Firefox Accounts integrations in FxOS so they might be able to offer some insight. Jared, Fernando, Michiel, there's extra context below, but the broad ask here is that Tommy's team would like to connect to Pocket from Firefox OS, and Pocket authenticates using the FxA OAuth API. Do you know of any existing code in Firefox OS that's using the FxA OAuth APIs? I played with [1] a few months ago while working on a prototype for the New Gaia Architecture project [2], but AFAIK there is no any other existing FxOS code using the FxA OAuth APIs. If not, a more specific question that would let us work towards that is: can a privileged app use the mozId API to produce a FxA assertion for any target audience? Yes, you should be able to specify any target audience with some restrictions. Check [3]. I think in your case your Pocket app will be shipped as a certified app, so you should be able to use mozId the same way FindMyDevice does. Cheers, / Fernando [1] https://github.com/mozilla/fxa-relier-client [2] https://github.com/fxos/contacts [3] https://mxr.mozilla.org/mozilla-central/source/dom/identity/nsDOMIdentity.js#617
_______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct
