Release 1.245.1

1. Use new auth cmdline for mysql
2. add autoconfig.uri , ask user to restart browser for webchannel
This commit is contained in:
jackyzy823
2022-11-18 17:09:11 +08:00
parent 977ac32df0
commit db64463ce3
4 changed files with 11 additions and 4 deletions

View File

@@ -5,6 +5,7 @@ From v1.235.1 to v1.242.4
for prune-token ,we only do token and code (as previous) , not touch session
because we should not judge how many sessions a user have.
is abusing docker HEALTHCHEK for scheduled job a good idea
2. mysql 5.7 -> 8.0
@@ -22,7 +23,11 @@ https://dev.mysql.com/doc/refman/8.0/en/docker-mysql-getting-started.html#docker
2) modify db-migration add if not exists for index , but old db has disel_migration table , should clean up.
fxa_event of deleted user ???? cleanup
fxa_event of deleted user ???? cleanup -> impl in 1.245.0 , becasue we are in same framework, no need event ,just do db delete.
-1. https://github.com/mozilla/fxa/pull/13741 consider removing this limit (cuz we are not mozilla, we can have @firefox.com as mail address)
From v1.242.4 to v1.245.0
1. ACCOUNT_EVENTS_ENABLED in auth-server maybe False

View File

@@ -26,7 +26,7 @@ persistencepath: .
#! [NOTE] v1.173+ change base docker image . missing key_*.json in fxa-auth-server so we change to branch br-v1.174.0 to apply breaking changes
#! by default we use tested version , using latest at your own risk.
fxa_version: "v1.244.0"
fxa_version: "v1.245.1"
option:
sync:

View File

@@ -43,7 +43,7 @@ services:
command:
- "--event-scheduler=ON"
- "--init-file=/tmp/common_init.sql"
- "--default-authentication-plugin=mysql_native_password"
- "--authentication_policy=mysql_native_password"
redis: #! used by fxa-profile-server(has prefixkey) fxa-content-server (seem not used?) fxa-auth-server(has prefix key)
image: redis:6.0-alpine
@@ -358,6 +358,7 @@ services:
- LOG_LEVEL=WARN
- LASTACCESSTIME_UPDATES_SAMPLE_RATE=1
- ACCOUNT_EVENTS_ENABLED=false
#! from v1.173.0 docker iamge do not have publickey.json and other key relate json
#! but it need openssl to genrsa 2048 . so ....
#! it's not elegant but no better way to ....

View File

@@ -160,7 +160,8 @@ cat <<HERE
"identity.fxaccounts.remote.oauth.uri": "https://$oauth.$name/v1",
"identity.fxaccounts.remote.profile.uri": "https://$profile.$name/v1",
"identity.sync.tokenserver.uri": "https://$sync.$name/token/1.0/sync/1.5",
APPEND/PREPEND https://$content.$name to "webchannel.allowObject.urlWhitelist"
Previous five lines can be replaced into: "identity.fxaccounts.autoconfig.uri": "https://$content.$name/",
APPEND/PREPEND https://$content.$name to "webchannel.allowObject.urlWhitelist" (and restart browser to make webchannel work)
HERE
if test $channelserver_enable == "true" ; then