Hi All, This week we'll be rolling FxA train-57 to production, with the following highlights:
* Added hover and active states for avatar upload dialog buttons; thanks Jason Strutz! * Allowed users with existing accounts to sign in directly from the sign-up page if they enter the right credentials, rather than bouncing them through a "this account already exists" error message. * Added subresource integrity declarations to our static resources, an important step towards hosting them on a CDN. * Expanded the OAuth consent screen to ask permission to share display name and avatar. Trusted reliers can now force display of this screen by passing the "prompt=consent" query parameter. * Added proper handling of quoted email addresses in bounce notifications; previously our bounce handling would error out and leave zombie unconfirmed accounts in the db. * Removed "en-US" language tag from links in our post-verification email, so users following them should now see localized content. * Added a new (strictly rate-limited!) API to check whether an account exists for a given email address. * Added device-id information to identity certificates, to allow more accurate device-related metrics in sync. * Disabled showing the dev console easteregg when in an iframe, where there's no way to disable it via devtools. * Fixed a bug in the password reset flow when signing in to a browser with e10s enabled. * Fixed a bug when uploading an avatar from a file. * Enabled the choose-what-to-sync screen in the first-run flow. * The choose-what-to-sync page now shows all engine choices to all clients, even if the current client doesn't support them. This is necessary since it's the only time many users will see the choices. * Fixed reporting of metrics on Windows 10 user-agents. As usual, you can dig into all the details and smaller changes in the changelogs for each repo: https://github.com/mozilla/fxa-auth-server/blob/master/CHANGELOG.md https://github.com/mozilla/fxa-content-server/blob/master/CHANGELOG.md Cheers, Ryan _______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct

