search

mozilla-lockwise / lockwise-android

Firefox's Lockwise app for Android
https://mozilla-lockwise.github.io/lockwise-android/
Mozilla Public License 2.0
623 stars 104 forks source link

Cannot login with account age under 14 in FxA webview #703

Closed abodea closed 5 years ago

abodea commented 5 years ago
  1. Install and launch lockwise.
  2. Add an email in order to register it.
  3. On the AGE field put -1.
  4. Tap on create account.

Expected behavior

The user is informed that the age must be above 14 years old(I think this is the limit) with a lock screen but also with a option to logout or login with another account.

Actual behavior

Lockwise is stuck and any other login cannot be made.

Device and build information

NgoHuy commented 5 years ago

I cannot login in LockWise with 2FA.

abodea commented 5 years ago

Hi @NgoHuy can you provide more steps regarding your issue?

NgoHuy commented 5 years ago

@abodea I enabled 2FA on firefox accounts, then I login with same password on LockWise, it sent me the verification code to email then returned me to get started page.

NgoHuy commented 5 years ago

oh sorry @abodea I type wrong password then email to alert me.

abodea commented 5 years ago

@NgoHuy no problem, even if this was still persisting for sure would be other issue separated of this.

Have a nice day, Andrei

NgoHuy commented 5 years ago

I confirm that I can login with 2FA.

shane-tomlinson commented 5 years ago

Blocking users that are 13 or under is a hard requirement from legal so that we do not fall afoul of COPPA - https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/childrens-online-privacy-protection-rule

ddurst commented 5 years ago

In fact, this "dead end" state -- for FxA -- is saved in a session cookie, so we intentionally don't want the user to be able to simply start over. Anything we would do here to allow that provides a way for a user to bypass that.