Le 25/11/14 11:13, Shane Tomlinson a écrit :
> On 24/11/2014 19:43, Tarek Ziadé wrote:
>> Moving folks in cc to Bcc and keeping the ML
>>
>> Le 24/11/14 20:26, Chris Karlof a écrit :
>> [..]
>>>> 2- will fxa-profile be Mozillian's backend for profile data ?
>>> I'm not sure, but migrating Mozillans.org data to FxA would be a serious 
>>> effort, so we should understand the value prop there.
>> I am not fully understanding the scope of fxa-profile - according to
>> https://developer.mozilla.org/en-US/Firefox_Accounts#Firefox_Accounts_user_data
>> it might even store phone numbers.
>>
>> So it sounded like a phonebook/directory of users to me. Which is
>> exactly what Mozillians.org is (a subset of a wider users directory +
>> some social feats)
>
> At the moment profile information is private by default and only
> provided to an RP after the OAuth dance. That said, public/searchable
> profiles are useful. I think your idea and the current private by
> default can co-exist.
>
> Users should be able to opt-in to making a portion of their profile
> public. We would then provide a search mechanism that returns the public
> profile information for a user. 
Yes, this is what Mozillians.org provides. If you log in your account
there, you have 3 levels of visibility for each info in your profile:

- private: only you can see it
- mozillians: only people connected can see it
- public: everyone can see it

They also have APIs to search by username or email
http://mozillians.readthedocs.org/en/latest/api/api-users.html
They have api keys to deal with *per app* authorization.


> If an RP wishes for additional user
> information, they have to go through the OAuth dance and for ask the
> user's permission. This would allow a user to make their email address &
> public key public, but nothing more.
That'd be exactly what I'd want. We'd probably need to have a list of
keys per users rather than a single key - and a way to revoke some.

I am not clear yet about the notion of "application" in fxa context though.

>
> Shane
>
>
>
> _______________________________________________
> Dev-fxacct mailing list
> [email protected]
> https://mail.mozilla.org/listinfo/dev-fxacct

_______________________________________________
Dev-fxacct mailing list
[email protected]
https://mail.mozilla.org/listinfo/dev-fxacct

Reply via email to