search

jdgeenen / gcontactsync

Synchronizes contacts & groups between Thunderbird or SeaMonkey and Google Contacts. Imports Facebook friends and Twitter contacts
Other
72 stars 15 forks source link

Improve the OAuth dialog #133

Open jdgeenen opened 5 years ago

jdgeenen commented 5 years ago

Is your feature request related to a problem? Please describe. Improve the OAuth dialog.

Describe the solution you'd like A cleaner dialog that displays the current URL so users have more confidence in how their credentials are handled. Look into Thunderbird's OAuth dialog for Gmail.

Additional context https://superuser.com/questions/1430046/how-can-i-know-for-sure-that-this-google-sign-in-is-legit/

jdgeenen commented 5 years ago

mailnews/base/util/OAuth2.jsm appears to be what is used by TB. It uses [Services.ww.openWindow](https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIWindowWatcher#openWindow()) 

requestWindowURI: "chrome://messenger/content/browserRequest.xul",
requestWindowFeatures: "chrome,private,centerscreen,width=980,height=750",

and a wrappedJSObject with several members (account, url, iconURI, cancelled, loaded, etc.) and the following: