![]() ![]() ![]() * If you're signed in to your browser, and try to access the FxA settings page in a Private Browsing window, what is the desired behaviour? * If you're signed in to your browser, and you attempt to login to an FxA OAuth relier in a Private Browsing window, what is the desired behaviour? We're working on tightening this up so it's a good opportunity to be more deliberate about the behaviour here, and add some tests to ensure we don't break it. In both cases, the current behaviour is more-or-less accidental - it's due to the way we use localStorage to coordinate login state between the browser and web content. The behaviour seems more appropriate in this case - you're in a private browsing window, you expect not to get automatic login to websites. Navigate to in this private window and click on "log in" Observe that you can login without re-entering your password, because we know you're already signed in in the browserĥ. ![]() You can observe similar behaviour when logging in to an OAuth relier:ģ. My gut feeling is that this is weird, and the user would reasonably expect "Manage Account" to work regardless of whether they're in a private browsing window. Observe that you're prompted to sign in again, because the private browsing window "doesn't know" that you're signed in to the browser Open Preferences -> Sync in this private window, and click on "Manage Account"Ħ. Observe that you're taken to the FxA settings page on the webĥ. Open Preferences -> Sync, and click on "Manage Account"ģ. The current behaviour can be demonstrated as follows:Ģ. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |