The Tor Browser / annotate

services/fxaccounts/FxAccountsCommon.js@b8a032363ba2 (annotated)

services/fxaccounts/FxAccountsCommon.js

Thu, 22 Jan 2015 13:21:57 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 22 Jan 2015 13:21:57 +0100
branch
TOR_BUG_9701
changeset 15
b8a032363ba2
permissions
-rw-r--r--

Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6

michael@0 1 /* This Source Code Form is subject to the terms of the Mozilla Public
michael@0 2 * License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0 4
michael@0 5 const { interfaces: Ci, utils: Cu } = Components;
michael@0 6
michael@0 7 Cu.import("resource://gre/modules/XPCOMUtils.jsm");
michael@0 8 Cu.import("resource://gre/modules/Services.jsm");
michael@0 9 Cu.import("resource://gre/modules/Log.jsm");
michael@0 10
michael@0 11 // loglevel should be one of "Fatal", "Error", "Warn", "Info", "Config",
michael@0 12 // "Debug", "Trace" or "All". If none is specified, "Debug" will be used by
michael@0 13 // default. Note "Debug" is usually appropriate so that when this log is
michael@0 14 // included in the Sync file logs we get verbose output.
michael@0 15 const PREF_LOG_LEVEL = "identity.fxaccounts.loglevel";
michael@0 16 // The level of messages that will be dumped to the console. If not specified,
michael@0 17 // "Error" will be used.
michael@0 18 const PREF_LOG_LEVEL_DUMP = "identity.fxaccounts.log.appender.dump";
michael@0 19
michael@0 20 // A pref that can be set so "sensitive" information (eg, personally
michael@0 21 // identifiable info, credentials, etc) will be logged.
michael@0 22 const PREF_LOG_SENSITIVE_DETAILS = "identity.fxaccounts.log.sensitive";
michael@0 23
michael@0 24 XPCOMUtils.defineLazyGetter(this, 'log', function() {
michael@0 25 let log = Log.repository.getLogger("FirefoxAccounts");
michael@0 26 // We set the log level to debug, but the default dump appender is set to
michael@0 27 // the level reflected in the pref. Other code that consumes FxA may then
michael@0 28 // choose to add another appender at a different level.
michael@0 29 log.level = Log.Level.Debug;
michael@0 30 let appender = new Log.DumpAppender();
michael@0 31 appender.level = Log.Level.Error;
michael@0 32
michael@0 33 log.addAppender(appender);
michael@0 34 try {
michael@0 35 // The log itself.
michael@0 36 let level =
michael@0 37 Services.prefs.getPrefType(PREF_LOG_LEVEL) == Ci.nsIPrefBranch.PREF_STRING
michael@0 38 && Services.prefs.getCharPref(PREF_LOG_LEVEL);
michael@0 39 log.level = Log.Level[level] || Log.Level.Debug;
michael@0 40
michael@0 41 // The appender.
michael@0 42 level =
michael@0 43 Services.prefs.getPrefType(PREF_LOG_LEVEL_DUMP) == Ci.nsIPrefBranch.PREF_STRING
michael@0 44 && Services.prefs.getCharPref(PREF_LOG_LEVEL_DUMP);
michael@0 45 appender.level = Log.Level[level] || Log.Level.Error;
michael@0 46 } catch (e) {
michael@0 47 log.error(e);
michael@0 48 }
michael@0 49
michael@0 50 return log;
michael@0 51 });
michael@0 52
michael@0 53 // A boolean to indicate if personally identifiable information (or anything
michael@0 54 // else sensitive, such as credentials) should be logged.
michael@0 55 XPCOMUtils.defineLazyGetter(this, 'logPII', function() {
michael@0 56 try {
michael@0 57 return Services.prefs.getBoolPref(PREF_LOG_SENSITIVE_DETAILS);
michael@0 58 } catch (_) {
michael@0 59 return false;
michael@0 60 }
michael@0 61 });
michael@0 62
michael@0 63 this.DATA_FORMAT_VERSION = 1;
michael@0 64 this.DEFAULT_STORAGE_FILENAME = "signedInUser.json";
michael@0 65
michael@0 66 // Token life times.
michael@0 67 // Having this parameter be short has limited security value and can cause
michael@0 68 // spurious authentication values if the client's clock is skewed and
michael@0 69 // we fail to adjust. See Bug 983256.
michael@0 70 this.ASSERTION_LIFETIME = 1000 * 3600 * 24 * 365 * 25; // 25 years
michael@0 71 // This is a time period we want to guarantee that the assertion will be
michael@0 72 // valid after we generate it (e.g., the signed cert won't expire in this
michael@0 73 // period).
michael@0 74 this.ASSERTION_USE_PERIOD = 1000 * 60 * 5; // 5 minutes
michael@0 75 this.CERT_LIFETIME = 1000 * 3600 * 6; // 6 hours
michael@0 76 this.KEY_LIFETIME = 1000 * 3600 * 12; // 12 hours
michael@0 77
michael@0 78 // Polling timings.
michael@0 79 this.POLL_SESSION = 1000 * 60 * 5; // 5 minutes
michael@0 80 this.POLL_STEP = 1000 * 3; // 3 seconds
michael@0 81
michael@0 82 // Observer notifications.
michael@0 83 this.ONLOGIN_NOTIFICATION = "fxaccounts:onlogin";
michael@0 84 this.ONVERIFIED_NOTIFICATION = "fxaccounts:onverified";
michael@0 85 this.ONLOGOUT_NOTIFICATION = "fxaccounts:onlogout";
michael@0 86
michael@0 87 // UI Requests.
michael@0 88 this.UI_REQUEST_SIGN_IN_FLOW = "signInFlow";
michael@0 89 this.UI_REQUEST_REFRESH_AUTH = "refreshAuthentication";
michael@0 90
michael@0 91 // Server errno.
michael@0 92 // From https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#response-format
michael@0 93 this.ERRNO_ACCOUNT_ALREADY_EXISTS = 101;
michael@0 94 this.ERRNO_ACCOUNT_DOES_NOT_EXIST = 102;
michael@0 95 this.ERRNO_INCORRECT_PASSWORD = 103;
michael@0 96 this.ERRNO_UNVERIFIED_ACCOUNT = 104;
michael@0 97 this.ERRNO_INVALID_VERIFICATION_CODE = 105;
michael@0 98 this.ERRNO_NOT_VALID_JSON_BODY = 106;
michael@0 99 this.ERRNO_INVALID_BODY_PARAMETERS = 107;
michael@0 100 this.ERRNO_MISSING_BODY_PARAMETERS = 108;
michael@0 101 this.ERRNO_INVALID_REQUEST_SIGNATURE = 109;
michael@0 102 this.ERRNO_INVALID_AUTH_TOKEN = 110;
michael@0 103 this.ERRNO_INVALID_AUTH_TIMESTAMP = 111;
michael@0 104 this.ERRNO_MISSING_CONTENT_LENGTH = 112;
michael@0 105 this.ERRNO_REQUEST_BODY_TOO_LARGE = 113;
michael@0 106 this.ERRNO_TOO_MANY_CLIENT_REQUESTS = 114;
michael@0 107 this.ERRNO_INVALID_AUTH_NONCE = 115;
michael@0 108 this.ERRNO_ENDPOINT_NO_LONGER_SUPPORTED = 116;
michael@0 109 this.ERRNO_INCORRECT_LOGIN_METHOD = 117;
michael@0 110 this.ERRNO_INCORRECT_KEY_RETRIEVAL_METHOD = 118;
michael@0 111 this.ERRNO_INCORRECT_API_VERSION = 119;
michael@0 112 this.ERRNO_INCORRECT_EMAIL_CASE = 120;
michael@0 113 this.ERRNO_SERVICE_TEMP_UNAVAILABLE = 201;
michael@0 114 this.ERRNO_UNKNOWN_ERROR = 999;
michael@0 115
michael@0 116 // Errors.
michael@0 117 this.ERROR_ACCOUNT_ALREADY_EXISTS = "ACCOUNT_ALREADY_EXISTS";
michael@0 118 this.ERROR_ACCOUNT_DOES_NOT_EXIST = "ACCOUNT_DOES_NOT_EXIST ";
michael@0 119 this.ERROR_ALREADY_SIGNED_IN_USER = "ALREADY_SIGNED_IN_USER";
michael@0 120 this.ERROR_ENDPOINT_NO_LONGER_SUPPORTED = "ENDPOINT_NO_LONGER_SUPPORTED";
michael@0 121 this.ERROR_INCORRECT_API_VERSION = "INCORRECT_API_VERSION";
michael@0 122 this.ERROR_INCORRECT_EMAIL_CASE = "INCORRECT_EMAIL_CASE";
michael@0 123 this.ERROR_INCORRECT_KEY_RETRIEVAL_METHOD = "INCORRECT_KEY_RETRIEVAL_METHOD";
michael@0 124 this.ERROR_INCORRECT_LOGIN_METHOD = "INCORRECT_LOGIN_METHOD";
michael@0 125 this.ERROR_INVALID_ACCOUNTID = "INVALID_ACCOUNTID";
michael@0 126 this.ERROR_INVALID_AUDIENCE = "INVALID_AUDIENCE";
michael@0 127 this.ERROR_INVALID_AUTH_TOKEN = "INVALID_AUTH_TOKEN";
michael@0 128 this.ERROR_INVALID_AUTH_TIMESTAMP = "INVALID_AUTH_TIMESTAMP";
michael@0 129 this.ERROR_INVALID_AUTH_NONCE = "INVALID_AUTH_NONCE";
michael@0 130 this.ERROR_INVALID_BODY_PARAMETERS = "INVALID_BODY_PARAMETERS";
michael@0 131 this.ERROR_INVALID_PASSWORD = "INVALID_PASSWORD";
michael@0 132 this.ERROR_INVALID_VERIFICATION_CODE = "INVALID_VERIFICATION_CODE";
michael@0 133 this.ERROR_INVALID_REFRESH_AUTH_VALUE = "INVALID_REFRESH_AUTH_VALUE";
michael@0 134 this.ERROR_INVALID_REQUEST_SIGNATURE = "INVALID_REQUEST_SIGNATURE";
michael@0 135 this.ERROR_INTERNAL_INVALID_USER = "INTERNAL_ERROR_INVALID_USER";
michael@0 136 this.ERROR_MISSING_BODY_PARAMETERS = "MISSING_BODY_PARAMETERS";
michael@0 137 this.ERROR_MISSING_CONTENT_LENGTH = "MISSING_CONTENT_LENGTH";
michael@0 138 this.ERROR_NO_TOKEN_SESSION = "NO_TOKEN_SESSION";
michael@0 139 this.ERROR_NOT_VALID_JSON_BODY = "NOT_VALID_JSON_BODY";
michael@0 140 this.ERROR_OFFLINE = "OFFLINE";
michael@0 141 this.ERROR_REQUEST_BODY_TOO_LARGE = "REQUEST_BODY_TOO_LARGE";
michael@0 142 this.ERROR_SERVER_ERROR = "SERVER_ERROR";
michael@0 143 this.ERROR_TOO_MANY_CLIENT_REQUESTS = "TOO_MANY_CLIENT_REQUESTS";
michael@0 144 this.ERROR_SERVICE_TEMP_UNAVAILABLE = "SERVICE_TEMPORARY_UNAVAILABLE";
michael@0 145 this.ERROR_UI_ERROR = "UI_ERROR";
michael@0 146 this.ERROR_UI_REQUEST = "UI_REQUEST";
michael@0 147 this.ERROR_UNKNOWN = "UNKNOWN_ERROR";
michael@0 148 this.ERROR_UNVERIFIED_ACCOUNT = "UNVERIFIED_ACCOUNT";
michael@0 149
michael@0 150 // Error matching.
michael@0 151 this.SERVER_ERRNO_TO_ERROR = {};
michael@0 152 SERVER_ERRNO_TO_ERROR[ERRNO_ACCOUNT_ALREADY_EXISTS] = ERROR_ACCOUNT_ALREADY_EXISTS;
michael@0 153 SERVER_ERRNO_TO_ERROR[ERRNO_ACCOUNT_DOES_NOT_EXIST] = ERROR_ACCOUNT_DOES_NOT_EXIST;
michael@0 154 SERVER_ERRNO_TO_ERROR[ERRNO_INCORRECT_PASSWORD] = ERROR_INVALID_PASSWORD;
michael@0 155 SERVER_ERRNO_TO_ERROR[ERRNO_UNVERIFIED_ACCOUNT] = ERROR_UNVERIFIED_ACCOUNT;
michael@0 156 SERVER_ERRNO_TO_ERROR[ERRNO_INVALID_VERIFICATION_CODE] = ERROR_INVALID_VERIFICATION_CODE;
michael@0 157 SERVER_ERRNO_TO_ERROR[ERRNO_NOT_VALID_JSON_BODY] = ERROR_NOT_VALID_JSON_BODY;
michael@0 158 SERVER_ERRNO_TO_ERROR[ERRNO_INVALID_BODY_PARAMETERS] = ERROR_INVALID_BODY_PARAMETERS;
michael@0 159 SERVER_ERRNO_TO_ERROR[ERRNO_MISSING_BODY_PARAMETERS] = ERROR_MISSING_BODY_PARAMETERS;
michael@0 160 SERVER_ERRNO_TO_ERROR[ERRNO_INVALID_REQUEST_SIGNATURE] = ERROR_INVALID_REQUEST_SIGNATURE;
michael@0 161 SERVER_ERRNO_TO_ERROR[ERRNO_INVALID_AUTH_TOKEN] = ERROR_INVALID_AUTH_TOKEN;
michael@0 162 SERVER_ERRNO_TO_ERROR[ERRNO_INVALID_AUTH_TIMESTAMP] = ERROR_INVALID_AUTH_TIMESTAMP;
michael@0 163 SERVER_ERRNO_TO_ERROR[ERRNO_MISSING_CONTENT_LENGTH] = ERROR_MISSING_CONTENT_LENGTH;
michael@0 164 SERVER_ERRNO_TO_ERROR[ERRNO_REQUEST_BODY_TOO_LARGE] = ERROR_REQUEST_BODY_TOO_LARGE;
michael@0 165 SERVER_ERRNO_TO_ERROR[ERRNO_TOO_MANY_CLIENT_REQUESTS] = ERROR_TOO_MANY_CLIENT_REQUESTS;
michael@0 166 SERVER_ERRNO_TO_ERROR[ERRNO_INVALID_AUTH_NONCE] = ERROR_INVALID_AUTH_NONCE;
michael@0 167 SERVER_ERRNO_TO_ERROR[ERRNO_ENDPOINT_NO_LONGER_SUPPORTED] = ERROR_ENDPOINT_NO_LONGER_SUPPORTED;
michael@0 168 SERVER_ERRNO_TO_ERROR[ERRNO_INCORRECT_LOGIN_METHOD] = ERROR_INCORRECT_LOGIN_METHOD;
michael@0 169 SERVER_ERRNO_TO_ERROR[ERRNO_INCORRECT_KEY_RETRIEVAL_METHOD] = ERROR_INCORRECT_KEY_RETRIEVAL_METHOD;
michael@0 170 SERVER_ERRNO_TO_ERROR[ERRNO_INCORRECT_API_VERSION] = ERROR_INCORRECT_API_VERSION;
michael@0 171 SERVER_ERRNO_TO_ERROR[ERRNO_INCORRECT_EMAIL_CASE] = ERROR_INCORRECT_EMAIL_CASE;
michael@0 172 SERVER_ERRNO_TO_ERROR[ERRNO_SERVICE_TEMP_UNAVAILABLE] = ERROR_SERVICE_TEMP_UNAVAILABLE;
michael@0 173 SERVER_ERRNO_TO_ERROR[ERRNO_UNKNOWN_ERROR] = ERROR_UNKNOWN;
michael@0 174
michael@0 175 // Allow this file to be imported via Components.utils.import().
michael@0 176 this.EXPORTED_SYMBOLS = Object.keys(this);

Mercurial Repository: The Tor Browser

Europalab SCM Repository Server

mercurial