QA/Browser Technologies/Services/Releases/BrowserID 01052012

Information

• Train 18: 01-05-2012

Links

• Bugs/Issues: https://github.com/mozilla/browserid/issues
• Test Plan: https://wiki.mozilla.org/QA/BrowserID/TestPlan
• Weekly Train Wiki: https://wiki.mozilla.org/QA/BrowserID/BrowserID_Weekly_Trains_Beta
• Stage Test Wiki: internal site TBD
• Stage Server: https://diresworb.org
• Stage Client/RP1: http://beta.myfavoritebeer.org
• Stage Client/RP2: http://beta.myfavoritebooze.org
• Stage Client/RP3: http://beta.myfavoriteshow.org
• Stage Client/RP4: http://carrera.databits.net:9999

• New Dev Server: https://dev-browserid.services.mozilla.com
• New Dev Client: http://beer.mtv1.dev.svc.mozilla.com

• Old Dev Server: https://dev.diresworb.org
• Old Dev Client/RP1: http://dev.myfavoritebeer.org
• Old Dev Client/RP2: http://dev.myfavoritebooze.org
• Old Dev Client/RP3: http://dev.myfavoriteshow.org

Deployment Ticket

• bug 715728 - QA and deploy BrowserID train-2012.01.05 to production

ChangeLog

• 01/05: ChangeLog including issues resolved:
  • https://github.com/mozilla/browserid/blob/train-2012.01.05/ChangeLog#L1-10

Versions

• old Dev: https://dev.diresworb.org/ver.txt
  • a943f02 Woot! Finished up the myriad user flows for required email. Now to clean this up.
• Prod: https://browserid.org/ver.txt
  • 08b727e ChangeLog update for issue #800
• new Dev: https://dev-browserid.services.mozilla.com/ver.txt
  • f8c2efd merge hotfix for issue #754 into beta: train-2011.12.08
• Stage: https://stage-browserid.services.mozilla.com/ver.txt
  • e9cd239 document changes in 2012.01.05, bump version number

Heartbeat

• old Dev: https://dev.diresworb.org/__heartbeat__
  • ok
• old Prod: https://browserid.org/__heartbeat__
  • ok
• Dev: https://dev-browserid.services.mozilla.com/__heartbeat__
  • ok
• Stage: https://diresworb.org/__heartbeat__
  • ok

Processes

• webheads
  • /usr/bin/node bin/browserid
  • /usr/bin/node bin/verifier
  • /usr/bin/node /opt/browserid/lib/verifier/verifier-compute.js
  • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
• secure webheads
  • /usr/bin/node bin/dbwriter
  • /usr/bin/node /opt/browserid/lib/bcrypt-compute.js
• keysigners
  • /usr/bin/node bin/keysigner
  • /usr/bin/node /opt/browserid/lib/keysigner/keysigner-compute.js
• databases: various mysql processes
• zeus: various zeus processes

Logs

• webheads: /var/log/browserid/
  • browserid.log
  • browserid-metrics.json
  • verifier.log
  • verifier-metrics.json
  • verifier-compute.log
• secure webheads: /var/log/browserid/
  • dbwriter.log
• keysigners have /var/log/browserid/
  • keysigner.log
  • keysigner-compute.log
• databases: n/a
• zeus: various logs

Unit Tests

• Front-End Unit Tests
  • Pass
• Back-End Unit Tests
  • Pass
• Headless Front-End Unit Tests
  • Pass

New/Updated OPs Tickets and Issues

• bug 695963 - browserid: coordinate log collection with metrics
• bug 710338 - Upgrade browserid.org SSL cert to EV or crazypants good level
• bug 713727 - rsbac logs to /var/log/rsbac.log
• bug 715350 - browserid: monitor node memory usage
• bug 715575 - http://browserid.org/.well-known/vep returning 404
• bug 716132 - sudden drop in user count @ identity dashboards
• bug 716250 - browserid: fix log rotation to be fixed time, not cron.daily
• bug 716940 - increase ephemeral port range on BrowserID webheads and load generation machines

New/Updated Security Tickets and Issues

• bug 665057 - Design and implement crypto API for Mozilla ID

New/Updated APPs Tickets and Issues

• bug 708086 - Cannot log-in to BrowserID on Dashboard or to https://apps-preview-dev.allizom.org using Opera
• bug 715027 - [prod] [stage] Affiliates: Logging in via BrowserID sporadically fails with a 403
• bug 715708 - browserid: register new user fails the first time?

Resolved/Closed Bugs and Issues

• [BrowserID issue 382] : Make a live link of MPL on the TOS page
• [BrowserID issue 388] : Removing one email from "account" with multiple emails refreshes/resets Diresworb.org
• [BrowserID issue 416] : encrypt cookie content
• [BrowserID issue 507] : Assertion uses base64-encoding twice
• [BrowserID issue 653] : put all compressed JS into a build directory.
• [BrowserID issue 732] : Signing in already known email will prompt to confirm your mail address
• [BrowserID issue 786] : load_gen: Fix load test to not obsessively spam with emails
• [BrowserID issue 806] : IE8: Loading diresworb.org often causes IE to crash
• [BrowserID issue 820] : IE8: change all background-color: rgba(x,x,x,x) to use a normal hex value.
• [BrowserID issue 821] : first time login flashes leftover dialog text saying "hardcore crypto"
• [BrowserID issue 822] : limit the size of POST body
• [BrowserID issue 826] : CentOS: local install now failing with dbwriter error
• [BrowserID issue 827] : IE8/WinXP - cannot authenticate to dev.diresworb.org
• [BrowserID issue 857] : "Error encountered trying to complete registration" displayed when registration seems to be fine on Android 2.2.2
• [BrowserID issue 298] : entropy on all devices, in particular touch
• [BrowserID issue 800] : fix csrf token generation
• [BrowserID issue 832] : Feature encrypt session cookie
• [BrowserID issue 876] : load_gen shows decline in QPS over time

• [BrowserID issue 35] : Unable to log out of beta.myfavoritebooz.org
• [BrowserID issue 40] : Very long beer names do not fit in the default field

Verified As Still Open, Reopened, or Updated : Server

• [BrowserID issue 536] : need log rotation for keysigner
• [BrowserID issue 772] : Dev/Stage: Get log rotation and archiving working
• [BrowserID issue 785] : load_gen: Investigate "failed to auth" errors showing up at regular intervals
• [BrowserID issue 793] : handle SIGHUP for log rotation
• [BrowserID issue 827] : IE8/WinXP - cannot authenticate to dev.diresworb.org
• [BrowserID issue 831] : JavaScript errors in IE7
• [BrowserID issue 839] : the browserid process consumes too much memory
• [BrowserID issue 848] : A dialog with unresponsive buttons is opened when confirming an email from a secondary browser
• [BrowserID issue 850] : The bolded text from the diresworb "We sent an email..." message is not displayed right being almost unreadable

Verified As Still Open, Reopened, or Updated : Client

• [BrowserID issue 12] : setting BROWSERID_URL to an IP address causes error
• [BrowserID issue 24] : The user is signed out from his account on http://myfavoritebeer.org/ when reloading the page
• [BrowserID issue 25] : Long usernames cause MyFavoriteBeer to push username onto next line.
• [BrowserID issue 26] : When closing the Signing in dialog from [X] the Sign In button from http://beta.myfavoritebeer.org remains grayed out and unresponsive
• [BrowserID issue 29] : iOS4: Sign In is not selectable if user leaves beer site then returns to sign in
• [BrowserID issue 30] : Android/FF7: Beer site layout does not fit correctly on screen
• [BrowserID issue 31] : Mobile: Beer name is not sticking
• [BrowserID issue 33] : The Sign In button is missing from beta.myfavoritebeer.org when javascript is disabled
• [BrowserID issue 36] : browserid logo in footer has an outline in IE
• [BrowserID issue 39] : logout link is really hard to find / see
• [BrowserID issue 41] : http://beta.myfavoritebooze.org/ and http://beta.myfavoritebeer.org/ are not fully displayed in the Android 2.3.3 native browser
• [BrowserID issue 42] : The header and the footer of https://beta.myfavoritebeer.org are not displayed in IE8

Opened Bugs/Issues For This Week: Server

• [BrowserID issue 858] : MDN: Not clear what to do next after setting up new browser id email address
• [BrowserID issue 866] : Remove the Unicode formatting from browserid.log
• [BrowserID issue 867] : Make the BID "Yellow Bar" more sticky (redraw on refresh)
• [BrowserID issue 869] : BrowserID needs to be more keyboard accessible
• [BrowserID issue 875] : load_gen shows decline in QPS over time
• [BrowserID issue 848] : A dialog with unresponsive buttons is opened when confirming an email from a secondary browser
• [BrowserID issue 849] : The password editing fields are displayed automatically after signing in on diresworb.org in IE8
• [BrowserID issue 850] : The bolded text from the diresworb "We sent an email..." message is not displayed right being almost unreadable
• [BrowserID issue 851] : Get errors running Headless unit tests on local install
• [BrowserID issue 857] : "Error encountered trying to complete registration" displayed when registration seems to be fine on Android 2.2.2
• [BrowserID issue 871] : The "keep me signed in" option disappears from the Sign In dialog when refreshed after removing an email address
• [BrowserID issue 872] : Wrong error message displayed under the described conditions
• [BrowserID issue 870] : Weird UI behaviour after cancelling account that has a pending 'add email' request
• [BrowserID issue 878] : limit the size of POST body in verifier

Opened Bugs/Issues For This Week: Client

• None

Other Open Bugs

• bug 706572 - Document best practices for localizing node.js services
• [BrowserID issue 846] : IE: Hang browser with iframes already in page when opening BrowserID.
• [BrowserID issue 847] : Safari 5.1.2 doesn't display the address bar of the browserid popup
• [BrowserID issue 852] : Provide a more explicit "change email address" workflow
• [BrowserID issue 853] : Allow for one-time email assertion
• [BrowserID issue 854] : npm: command not found
• [BrowserID issue 855] : first time sign-in dialog provides confusing copy/labels with sign-in vs. new password
• [BrowserID issue 856] : privacy policy render issues with BetterPrivacy add-on
• [BrowserID issue 859] : Upgrade license to MPL 2.
• [BrowserID issue 860] : reduce the cost of logging
• [BrowserID issue 861] : remove vagrant files and documentation
• [BrowserID issue 862] : Bug706572 localization
• [BrowserID issue 863] : build a simple demonstration BrowserID primary
• [BrowserID issue 864] : delegation of authority
• [BrowserID issue 865] : move declaration of support: /.well-known/{vep,browserid}
• [BrowserID issue 868] : buttons underline on hover
• [BrowserID issue 873] : Progress animation should be BIDI aware
• [BrowserID issue 874] : help text for creating a strong, memorable password
• [BrowserID issue 877] : privacy and ToS in BrowserID popup

Notes

• Lloyd's notes
  • Support for primaries added in this train but is currently disabled/off
  • Next train should have two addtions:
    • l10n support added but disable/off
    • Primaries support enabled/on