Hi All,
This week we'll be rolling FxA train-44 intro production, with the following highlights: * The sign-up form now sports a password strength checker, thanks to summer intern Sai. It will be deployed in metrics-gathering mode this train, and we'll use that feedback to inform our UI choices for dealing with weak passwords. * The content-server has preliminary support for cache-busting, on-demand loading of client javascript modules, initially in use to demand-load the password strength checker code. * There's a new, simpler method for asking the user's age at signup, which we'll be A/B testing against the existing widget. * There's a new `context=fx_fennec_v1` mode to support use of the web-based login flow on Firefox for Android. * en-GB is now an officially-supported locale. * We have backend support infrastructure for logging in to FxA via an OpenID provider; this is currently only for partner demos and we've no concrete plans to enable it in production. * OAuth implicit grants can now request an empty scope, for consistency with other grant modes. * We now store user-agent metadata and last access time for each session token, to help users identify their active sessions in a future management dashboard. * Some server-side events are now logged to DataDog for easier visualisation and analysis. * We have a new script to report aggregate metrics on multi-device versus single-device accounts. * All our database backend code now lives in the fxa-auth-db-mysql repository, which should eliminate the development pains of having to coordinate PRs across multiple fxa-auth-db-* repos. * The profile server will now delete avatar pictures and other user data when the user deletes their account. * Control characters and other definitely-not-text symbols are now disallowed in the display_name profile field. * Our credentials input fields are no longer subjected to spellcheck of auto-capitalization by the browser. * Authentication failures when displaying profile data on the website are now handled more cleanly. * A tremendous number of bugfixes and metrics-gathering enhancements. On top of all that, in a separate patch release, we'll be shipping: * A redesigned, substantially-more-beautiful-and-useable settings page! As always, you can dig into the details through the CHANGELOG files in each individual repo: https://github.com/mozilla/fxa-content-server/blob/master/CHANGELOG.md https://github.com/mozilla/fxa-oauth-server/blob/master/CHANGELOG.md https://github.com/mozilla/fxa-auth-server/blob/master/CHANGELOG https://github.com/mozilla/fxa-auth-db-mysql/blob/master/CHANGELOG-db.md https://github.com/mozilla/fxa-profile-server/blob/master/CHANGELOG.md Cheers, Ryan _______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct
