Hi,

> After a user logs into Sync, many users expect to be able to log into
> other FxA relying services (e.g., Hello, Pocket) without re-entering
> their password.

I am wondering if access-token could help us fix this issue in some ways.

1. You log into Firefox using your FxA credentials and get an Access Token.
2. As soon as you need to log into another service, you ask for a Bearer
token with the app scopes.
3. A FxA content server page exposing the list of scopes you need to
grant to give access to this new app shows up
4. If you accept it, the Access Token is you to build a new Bearer Token
for this specific app.

I think we already have a page for Pocket that ask for this.

Best regards,

Rémy

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Dev-fxacct mailing list
[email protected]
https://mail.mozilla.org/listinfo/dev-fxacct

Reply via email to