Hi All,


A little while ago we shipped FxA train-89 to production.  I didn't email
you about it because of the all-hands, but here are the belated release
highlights:



Features



Mobile Push (Phase 1): post-verify page

   -

   Documented CAD flow events.


Mobile Push (Phase 2): SMS install link

   -

   Fixed a broken smsSend test and now use real senders when sending via
   MockNexmo, so that undelivered messages aren’t reported as being delivered
   -

   Now use a distinct phone number for every SMS test.


   -

   Removed the testPhoneNumber default to fix tests so now tests that send
   an SMS look for the existence of testPhoneNumber before sending. Disabled
   these tests until we have a better plan.


Mobile Push (Phase 3): deeplink with email

   -

   Now that distinct phone numbers are used for each test, testPhoneNumber
   and testPhoneNumberCountry are no longer needed.
   -

   Added support for the SMS signinCode so that signinCodes can be sent
   -

   Enabled signinCode expiry


Email deliverability

   -

   Now log a 'sent' email event for each CC: address
   -

   Added email metrics documentation


Add additional emails (Phase 1)

   -

   Added CC: support to mail_helper for testing purposes
   -

   Added an endpoint to determine if secondary emails are enabled
   -

   Added tests for unblock and sign in confirmation



Change Primary Email (Phase 2)

   -

   Fixed a performance issue where email looking was using an unindexed
   column, and hence doing a full table scan that could cause request timouts.
   -

   Removed use of temporary tables from email-related stored procedure, as
   they appear to have been causing issues with database replication.
   -

   The email records in the "accounts" and "emails" tables are now kept
   fully in-sync.



Quality Improvements:

   -

   Fixed a security issue where unescaped HTML from a malicious user-agent
   string could be incorporated into our HTML emails.
   -

   Updated loadtests to cope with sign-in confirmation.


   -

   Made `npm test` faster to make development faster on the auth-server.
   -

   The blocklisting of bounced email addresses is now a little less harsh.
   A single bounce will now only get you blocked for 24 hours, while repeated
   bounces will trigger a longer blocking period.


   -

   Removed datadog/statsd integration from the auth-server, because of
   doubts about the reliability of the numbers to get any value out of it.
   -

   Re-added the "Maybe later" link to the SMS CAD flow.


   -

   We now support emoji in profile display name.  Assuming this sticks in
   production, we can use the same approach to support emojis in other places
   as well.



As always, you can find more details in the changelogs for each repo:



 https://github.com/mozilla/fxa-auth-server/blob/v1.89.0/CHANGELOG.md

 https://github.com/mozilla/fxa-content-server/blob/v1.89.2/CHANGELOG.md

 https://github.com/mozilla/fxa-auth-db-mysql/blob/v1.89.3/CHANGELOG.md

 https://github.com/mozilla/fxa-oauth-server/blob/v1.89.0/CHANGELOG.md

 https://github.com/mozilla/fxa-profile-server/blob/v1.89.0/CHANGELOG.md



  Cheers,


     Ryan
_______________________________________________
Dev-fxacct mailing list
[email protected]
https://mail.mozilla.org/listinfo/dev-fxacct

Reply via email to