tl;dr We improved the authentication system in MozReview. Please log out (if necessary) and back into the MozReview UI (Review Board) before pushing any commits up for review.
Today we deployed a change to MozReview's authentication system. Rather than logging into Review Board with your Bugzilla credentials, you'll now be redirected to Bugzilla to log in. After you log in, or immediately if you already have an open Bugzilla session, you'll be redirected back to MozReview, and an API key will be sent in the background. This API key is listed in your Bugzilla Preferences and can be revoked at any time if you no longer want to use MozReview, or if you want to generate and use a new one for some reason. You'll also get an email notifying you that an API key has been created. Note that, in addition to being more secure, this fixes the known, annoying problem of being periodically logged out of MozReview. You'll have to log into the UI before you publish review requests for reviewer detection to work, since all communication between the MozReview server and Bugzilla now uses API keys. We had one report that the user seemed to still be logged in after the deployment today; if that happens, please log out and back in again. We apologize for this inconvenience and for not announcing that part earlier. API-key support on the command line is nearly finished (see bug 1198087), after which MozReview will no longer need your password nor cookies at all. See my previous post for more info: https://mrcote.info/blog/2015/08/04/mozreview-auth-changes/ Mark _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
