{"action":"created","issue":{"url":"https://api.github.com/repos/mozilla/addons-server/issues/6451","repository_url":"https://api.github.com/repos/mozilla/addons-server","labels_url":"https://api.github.com/repos/mozilla/addons-server/issues/6451/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/addons-server/issues/6451/comments","events_url":"https://api.github.com/repos/mozilla/addons-server/issues/6451/events","html_url":"https://github.com/mozilla/addons-server/issues/6451","id":258796068,"number":6451,"title":"Allow FxA to update user's email address without the using logging in","user":{"login":"eviljeff","id":768592,"avatar_url":"https://avatars2.githubusercontent.com/u/768592?v=4","gravatar_id":"","url":"https://api.github.com/users/eviljeff","html_url":"https://github.com/eviljeff","followers_url":"https://api.github.com/users/eviljeff/followers","following_url":"https://api.github.com/users/eviljeff/following{/other_user}","gists_url":"https://api.github.com/users/eviljeff/gists{/gist_id}","starred_url":"https://api.github.com/users/eviljeff/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eviljeff/subscriptions","organizations_url":"https://api.github.com/users/eviljeff/orgs","repos_url":"https://api.github.com/users/eviljeff/repos","events_url":"https://api.github.com/users/eviljeff/events{/privacy}","received_events_url":"https://api.github.com/users/eviljeff/received_events","type":"User","site_admin":false},"labels":[{"id":276108726,"url":"https://api.github.com/repos/mozilla/addons-server/labels/component:%20api","name":"component: api","color":"107c05","default":false},{"id":273135517,"url":"https://api.github.com/repos/mozilla/addons-server/labels/component:%20firefox%20accounts","name":"component: firefox accounts","color":"107c05","default":false},{"id":540035677,"url":"https://api.github.com/repos/mozilla/addons-server/labels/triaged","name":"triaged","color":"ededed","default":false}],"state":"closed","locked":false,"assignee":{"login":"eviljeff","id":768592,"avatar_url":"https://avatars2.githubusercontent.com/u/768592?v=4","gravatar_id":"","url":"https://api.github.com/users/eviljeff","html_url":"https://github.com/eviljeff","followers_url":"https://api.github.com/users/eviljeff/followers","following_url":"https://api.github.com/users/eviljeff/following{/other_user}","gists_url":"https://api.github.com/users/eviljeff/gists{/gist_id}","starred_url":"https://api.github.com/users/eviljeff/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eviljeff/subscriptions","organizations_url":"https://api.github.com/users/eviljeff/orgs","repos_url":"https://api.github.com/users/eviljeff/repos","events_url":"https://api.github.com/users/eviljeff/events{/privacy}","received_events_url":"https://api.github.com/users/eviljeff/received_events","type":"User","site_admin":false},"assignees":[{"login":"eviljeff","id":768592,"avatar_url":"https://avatars2.githubusercontent.com/u/768592?v=4","gravatar_id":"","url":"https://api.github.com/users/eviljeff","html_url":"https://github.com/eviljeff","followers_url":"https://api.github.com/users/eviljeff/followers","following_url":"https://api.github.com/users/eviljeff/following{/other_user}","gists_url":"https://api.github.com/users/eviljeff/gists{/gist_id}","starred_url":"https://api.github.com/users/eviljeff/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eviljeff/subscriptions","organizations_url":"https://api.github.com/users/eviljeff/orgs","repos_url":"https://api.github.com/users/eviljeff/repos","events_url":"https://api.github.com/users/eviljeff/events{/privacy}","received_events_url":"https://api.github.com/users/eviljeff/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/mozilla/addons-server/milestones/86","html_url":"https://github.com/mozilla/addons-server/milestone/86","labels_url":"https://api.github.com/repos/mozilla/addons-server/milestones/86/labels","id":2864545,"number":86,"title":"2017.11.23","description":"","creator":{"login":"muffinresearch","id":1514,"avatar_url":"https://avatars1.githubusercontent.com/u/1514?v=4","gravatar_id":"","url":"https://api.github.com/users/muffinresearch","html_url":"https://github.com/muffinresearch","followers_url":"https://api.github.com/users/muffinresearch/followers","following_url":"https://api.github.com/users/muffinresearch/following{/other_user}","gists_url":"https://api.github.com/users/muffinresearch/gists{/gist_id}","starred_url":"https://api.github.com/users/muffinresearch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muffinresearch/subscriptions","organizations_url":"https://api.github.com/users/muffinresearch/orgs","repos_url":"https://api.github.com/users/muffinresearch/repos","events_url":"https://api.github.com/users/muffinresearch/events{/privacy}","received_events_url":"https://api.github.com/users/muffinresearch/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":13,"state":"closed","created_at":"2017-10-25T11:56:09Z","updated_at":"2017-11-24T15:56:42Z","due_on":"2017-11-21T08:00:00Z","closed_at":"2017-11-24T15:56:42Z"},"comments":28,"created_at":"2017-09-19T12:04:32Z","updated_at":"2018-03-29T07:53:06Z","closed_at":"2017-11-16T17:06:45Z","author_association":"MEMBER","body":"FxA allows a second email address to be added to an FxA account, and will soon allow that second email address to be made the primary, effectively allowing the user to change their email address. (See https://bugzilla.mozilla.org/show_bug.cgi?id=1393588 for more background.)\r\n\r\nAMO updates the email address, if changed, on login, so we will get the new email next time they log in to AMO.  But in the meantime AMO has the old email address so we may then be emailing incorrectly about editor reviewers, user reviews, admin matters, etc.\r\n\r\nQuestion: could one of the existing API endpoints be trivially used to allow this?  /authenticate  and /login both do the update.  But also both mark the user as having logged in.  (And are there additional state and tokens that FxA wouldn't have?)\r\n\r\nOtherwise, we need a special endpoint just for FxA.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/mozilla/addons-server/issues/comments/377153632","html_url":"https://github.com/mozilla/addons-server/issues/6451#issuecomment-377153632","issue_url":"https://api.github.com/repos/mozilla/addons-server/issues/6451","id":377153632,"user":{"login":"eviljeff","id":768592,"avatar_url":"https://avatars2.githubusercontent.com/u/768592?v=4","gravatar_id":"","url":"https://api.github.com/users/eviljeff","html_url":"https://github.com/eviljeff","followers_url":"https://api.github.com/users/eviljeff/followers","following_url":"https://api.github.com/users/eviljeff/following{/other_user}","gists_url":"https://api.github.com/users/eviljeff/gists{/gist_id}","starred_url":"https://api.github.com/users/eviljeff/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eviljeff/subscriptions","organizations_url":"https://api.github.com/users/eviljeff/orgs","repos_url":"https://api.github.com/users/eviljeff/repos","events_url":"https://api.github.com/users/eviljeff/events{/privacy}","received_events_url":"https://api.github.com/users/eviljeff/received_events","type":"User","site_admin":false},"created_at":"2018-03-29T07:53:06Z","updated_at":"2018-03-29T07:53:06Z","author_association":"MEMBER","body":"QA:\r\nThis can be tested on -dev only .  I'll file a follow-up issue to have right settings added for stage&prod so you can do stage/prod QA when that one is closed.\r\n\r\n1. Login to AMO with a Firefox Account\r\n2. go to your account profile edit page and load the 'Manage Firefox Account' link in a different tab\r\n3. add a secondary email address in FxA; go through the email confirmation dance; switch secondary email to primary email.\r\n4. flip back to the account profile edit page on AMO and note the email address (it will be the old primary)\r\n5. refresh the page and see the new primary email address.\r\n\r\nYou don't have to use the Manage link within AMO, or have the edit profile page opened -or be logged into AMO at all- it's just a convenient page to see the change with a refresh.  To verify that:\r\n1. choose an account (A) and make sure you're _not_ logged into AMO\r\n2. change your primary email address with FxA as above\r\n3. login to AMO with a _different_ account (B), that has admin superpowers, in a PrivateBrowsing window and check the email address of account (A) (e.g. using the Manage User button in legacy frontend)\r\n"}}
{"actor":{"display_login":"eviljeff"}}