oxur / rucksack

A terminal-based secrets manager, generator, and importer/exporter (Firefox, Chrome) backed with a concurrent hashmap
Apache License 2.0
12 stars 1 forks source link

Is it possible to publish an update to Firefox Sync? #33

Open oubiwann opened 1 year ago

oubiwann commented 1 year ago

Either as a sync client or as code that can talk to the browser?

oubiwann commented 1 year ago

A python PoC that pulls encrypted data out of FF Sync:

oubiwann commented 1 year ago

A more general-purpose Firefox Account Python client:

oubiwann commented 1 year ago

OAuth, decryption, etc., for FF Sync:

oubiwann commented 1 year ago

Hey, in Rust:

oubiwann commented 1 year ago

For that last one, looks like we could just use this: https://github.com/NilsIrl/pass-fxa/blob/master/lib/src/lib.rs

oubiwann commented 1 year ago

actually, no. Some quick tests, and it's clear that pass-fxa-lib isn't sending good requests for Firefox Sync (the SyncClient takes just user and pass, but the request fails with:

[lib/src/lib.rs:383] bad_request_error = BadRequestError {
    code: 400,
    errno: 107,
    message: "Invalid parameter in request body",
    verification_method: None,
    verification_reason: None,
}
oubiwann commented 1 year ago

I'll test with fxa_client next.