{"action":"created","issue":{"url":"https://api.github.com/repos/mozilla/fxa-content-server/issues/2384","labels_url":"https://api.github.com/repos/mozilla/fxa-content-server/issues/2384/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/fxa-content-server/issues/2384/comments","events_url":"https://api.github.com/repos/mozilla/fxa-content-server/issues/2384/events","html_url":"https://github.com/mozilla/fxa-content-server/issues/2384","id":73523367,"number":2384,"title":"Relier keys don't work after signup and verify in same browser","user":{"login":"rfk","id":34695,"avatar_url":"https://avatars.githubusercontent.com/u/34695?v=3","gravatar_id":"","url":"https://api.github.com/users/rfk","html_url":"https://github.com/rfk","followers_url":"https://api.github.com/users/rfk/followers","following_url":"https://api.github.com/users/rfk/following{/other_user}","gists_url":"https://api.github.com/users/rfk/gists{/gist_id}","starred_url":"https://api.github.com/users/rfk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rfk/subscriptions","organizations_url":"https://api.github.com/users/rfk/orgs","repos_url":"https://api.github.com/users/rfk/repos","events_url":"https://api.github.com/users/rfk/events{/privacy}","received_events_url":"https://api.github.com/users/rfk/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mozilla/fxa-content-server/labels/waffle:needs%20review","name":"waffle:needs review","color":"ededed"}],"state":"open","locked":false,"assignee":{"login":"rfk","id":34695,"avatar_url":"https://avatars.githubusercontent.com/u/34695?v=3","gravatar_id":"","url":"https://api.github.com/users/rfk","html_url":"https://github.com/rfk","followers_url":"https://api.github.com/users/rfk/followers","following_url":"https://api.github.com/users/rfk/following{/other_user}","gists_url":"https://api.github.com/users/rfk/gists{/gist_id}","starred_url":"https://api.github.com/users/rfk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rfk/subscriptions","organizations_url":"https://api.github.com/users/rfk/orgs","repos_url":"https://api.github.com/users/rfk/repos","events_url":"https://api.github.com/users/rfk/events{/privacy}","received_events_url":"https://api.github.com/users/rfk/received_events","type":"User","site_admin":false},"milestone":null,"comments":11,"created_at":"2015-05-06T05:46:44Z","updated_at":"2015-05-06T09:00:30Z","closed_at":null,"body":"This was originally reported as https://bugzilla.mozilla.org/show_bug.cgi?id=1161560.\r\n\r\nIf you go to sign into Hello, create a new account, and then verify in the same browser then the login flow fails to produce relier keys.  Verifying in a different browser works fine.\r\n\r\nWe suspect that the keys=true state is not correctly tunneled through the verification link.  When verying in the same browser, the tab that you open after clicking the \"verify\" link is the one that ultimately handles the completion of the oauth dance.  If this tab doesn't know enough context to derive keys, it will fail to return them."},"comment":{"url":"https://api.github.com/repos/mozilla/fxa-content-server/issues/comments/99389290","html_url":"https://github.com/mozilla/fxa-content-server/issues/2384#issuecomment-99389290","issue_url":"https://api.github.com/repos/mozilla/fxa-content-server/issues/2384","id":99389290,"user":{"login":"rfk","id":34695,"avatar_url":"https://avatars.githubusercontent.com/u/34695?v=3","gravatar_id":"","url":"https://api.github.com/users/rfk","html_url":"https://github.com/rfk","followers_url":"https://api.github.com/users/rfk/followers","following_url":"https://api.github.com/users/rfk/following{/other_user}","gists_url":"https://api.github.com/users/rfk/gists{/gist_id}","starred_url":"https://api.github.com/users/rfk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rfk/subscriptions","organizations_url":"https://api.github.com/users/rfk/orgs","repos_url":"https://api.github.com/users/rfk/repos","events_url":"https://api.github.com/users/rfk/events{/privacy}","received_events_url":"https://api.github.com/users/rfk/received_events","type":"User","site_admin":false},"created_at":"2015-05-06T09:00:30Z","updated_at":"2015-05-06T09:00:30Z","body":"AFAICT there's three cases that we need to tease apart:\r\n\r\n* verify in original browser, with originating tab still open => let originating tab deal with it\r\n* verify in original browser, with originating tab closed => force_auth and publish the keys from there\r\n* verify in other browser => behaviour stays the way it is currently\r\n\r\n> then re-constituted when the verification page loads\r\n\r\nAha, I was very confused when I couldn't find anywhere that actually parsed the resume-token."}}