Hi All,
A little while ago we shipped FxA train-89 to production. I didn't email you about it because of the all-hands, but here are the belated release highlights: Features Mobile Push (Phase 1): post-verify page - Documented CAD flow events. Mobile Push (Phase 2): SMS install link - Fixed a broken smsSend test and now use real senders when sending via MockNexmo, so that undelivered messages aren’t reported as being delivered - Now use a distinct phone number for every SMS test. - Removed the testPhoneNumber default to fix tests so now tests that send an SMS look for the existence of testPhoneNumber before sending. Disabled these tests until we have a better plan. Mobile Push (Phase 3): deeplink with email - Now that distinct phone numbers are used for each test, testPhoneNumber and testPhoneNumberCountry are no longer needed. - Added support for the SMS signinCode so that signinCodes can be sent - Enabled signinCode expiry Email deliverability - Now log a 'sent' email event for each CC: address - Added email metrics documentation Add additional emails (Phase 1) - Added CC: support to mail_helper for testing purposes - Added an endpoint to determine if secondary emails are enabled - Added tests for unblock and sign in confirmation Change Primary Email (Phase 2) - Fixed a performance issue where email looking was using an unindexed column, and hence doing a full table scan that could cause request timouts. - Removed use of temporary tables from email-related stored procedure, as they appear to have been causing issues with database replication. - The email records in the "accounts" and "emails" tables are now kept fully in-sync. Quality Improvements: - Fixed a security issue where unescaped HTML from a malicious user-agent string could be incorporated into our HTML emails. - Updated loadtests to cope with sign-in confirmation. - Made `npm test` faster to make development faster on the auth-server. - The blocklisting of bounced email addresses is now a little less harsh. A single bounce will now only get you blocked for 24 hours, while repeated bounces will trigger a longer blocking period. - Removed datadog/statsd integration from the auth-server, because of doubts about the reliability of the numbers to get any value out of it. - Re-added the "Maybe later" link to the SMS CAD flow. - We now support emoji in profile display name. Assuming this sticks in production, we can use the same approach to support emojis in other places as well. As always, you can find more details in the changelogs for each repo: https://github.com/mozilla/fxa-auth-server/blob/v1.89.0/CHANGELOG.md https://github.com/mozilla/fxa-content-server/blob/v1.89.2/CHANGELOG.md https://github.com/mozilla/fxa-auth-db-mysql/blob/v1.89.3/CHANGELOG.md https://github.com/mozilla/fxa-oauth-server/blob/v1.89.0/CHANGELOG.md https://github.com/mozilla/fxa-profile-server/blob/v1.89.0/CHANGELOG.md Cheers, Ryan
_______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct

