On Mar 13, 2013, at 11:53 AM, Fabrice Desre <[email protected]> wrote:

> On 03/13/2013 09:46 AM, Kumar McMillan wrote:
>> To answer your earlier question, UUIDs are unique to the app, not to the 
>> device. The UUID is generated when you (or more realistically, Firefox 
>> Marketplace) creates *and* signs a packaged app. Your app would thus 
>> theoretically have the same app:// URL on all devices but I don't know how 
>> well you can trust this.
>> 
>> A bit of info is here: 
>> https://developer.mozilla.org/en-US/docs/Apps/Packaged_apps#Differences_from_hosted_apps
>> 
>> I don't know what happens if an unprivileged packaged app tries to copy a 
>> UUID. Also, I don't know what happens when you try to install a packaged app 
>> that is unsigned or is signed by an unknown party. These are all good 
>> questions to know answers to :) I believe the intention is to disallow 
>> unsigned packaged apps in the future.
> 
> In any case, the uuid used for app URI has no relationship with the one
> from the marketplace; it is created by gecko at install time.

D'oh, I did not know that. So are you saying for app://<UUID> the UUID will be 
unique per device? It doesn't seem like something to rely on in either case but 
I'm curious.

> 
> And yes, all this OAuth stuff is painful in our setup, and I don't have
> a good solution now (I have a hackish one, but it's not good).
> 
>       Fabrice
> -- 
> Fabrice Desré
> b2g team
> Mozilla Corporation
> _______________________________________________
> dev-webapps mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-webapps

_______________________________________________
dev-webapps mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-webapps

Reply via email to