search

mozilla / payments-service

This is a web service to support the Mozilla Payments web UI.
Other
5 stars 7 forks source link

Disallow un-authenticated sign-ins #149

Open kumar303 opened 9 years ago

kumar303 commented 9 years ago

After https://github.com/mozilla/payments-service/pull/148 we will have buyers in the system with authenticated=False. It's not totally clear how we want to let these users sign-in through FxA. Should we remove access to saved payment methods? Can they use the management app? Lots of questions. For now, let's just disallow sign-ins when the buyer object is authenticated=False.

supports https://github.com/mozilla/payments/issues/117

kumar303 commented 9 years ago

requires a hash lookup of the email https://github.com/mozilla/payments-service/issues/151#issuecomment-136794620