Represents the sync storage area. Items in sync storage are synced by the browser, and are available across all instances of that browser that the user is logged into (e.g. Via Firefox sync, or a Google account), across different devices. For Firefox a user must have Add-ons checked under the 'Sync Settings' options in 'about:preferences'. Note that the implementation of storage.sync in. GET IT FOR: Apps. Firefox for Desktop. Get the not-for-profit-backed browser on Windows, Mac or Linux. Firefox for Android. Get the customizable mobile browser for Android smartphones. Firefox for Desktop. Get the not-for-profit-backed browser on Windows, Mac or Linux. Firefox for Android. Get the customizable mobile browser for Android smartphones. Learn how to find out what Firefox version you are using, to help troubleshoot a problem or just to know if Firefox is up to date. Recovering important data from an old profile If you need to create a new Firefox profile, find out how to recover your old Firefox data such as bookmarks, history and passwords.
Overview
A Firefox Account user can connect a new device to their account without entering a password,by instead 'pairing' with an already-connected device in order to obtain account credentials.
Currently, the pairing implementation is limited to a mobile device (Firefox Android and iOS) scanning a QR code displayed on a computer (Firefox Desktop) already connected to a Firefox Account. We hope to expand these capabilities in future.
User Flow
Let's assume that the user is already signed-in to their Desktop Firefox profile.
On their mobile device, Firefox invites them to navigate to firefox.com/pair on their Desktop browser,and offers to scan the QR code which will be generated by that device. Like this:
When they visit that URL on their Desktop device, it will confirm their intent to connectanother device, and then generate and display a QR code. Like this:
When the user scans the QR code, each device will show a confirmation screen,and after user approval the new device will be connected to their account.
A detailed technical user-flow is available here.
Implementation
High-level description of the flow
- The two devices exchange a one-time secret key via QR code, and use it to createa shared, encrypted and authenticated communication channel over websockets.
- The Channel Server is responsiblefor proxying communication between the two devices.
- The Pairing Channel library provides thecrypto necessary to authenticate and encrypt the channel, using TLS1.3 in pre-shared-key mode.
- The Desktop device is responsible for creating the channel and its corresponding secret key,and advertising those details in a QR code.
- The Mobile device connects to the channel using the details it scans from the QR code.
- The Mobile device prepares an OAuth request for connecting to FxA, but instead of redirectingto a webpage on https://accounts.firefox.com, it sends the OAuth request to the Desktop deviceover the pairing channel.
- The Desktop device receives the OAuth request, confirms user consent, and uses its existingcredentials to tell the FxA server to grant a corresponding OAuth authorization code. Insteadof delivering the code via the usual OAuth HTTP redirect, it sends the code back to the Mobile device over the pairing channel.
- The Mobile device receives the code and processes it just as it would for an ordinaryweb-based OAuth flow, by talking to the FxA server to exchange the code for some OAuth tokens.
There is some additional message-passing the takes place over the pairing channel in order toshow confirmation screens and help smooth out the experience, but the high-level abstractionis 'do an OAuth flow, but using the pairing channel instead of HTTP redirects'.
Detailed implementation description
The implementation is described here.
Please note that the FxA Pairing Flow - Application Layer Lucidchart diagram should be treated as the source of truthregarding the pairing protocol and kept up-to-date. There is also a rendered png of the diagram available on the detailed architecture docs. Pentium dual core e5200 graphics driver download.
Where does the code live?
- Desktop client implementation (UI)
Security concerns and desired security properties
Described here.
Possible evolutions
Firefox Sync Ipad
- Reverse pairing: allow a computer to connect to an account by scanning a QR code with an already connected mobile Firefox.
- Pairing using a code to type: more accessible, allows device without a back camera to pair (i.e. 2 computers).