34544 Commits

Author SHA1 Message Date
Valerie Pomerleau
03cd2e797a Merge pull request #19638 from mozilla/dependabot/npm_and_yarn/next-14.2.32
chore(deps): bump next from 14.2.29 to 14.2.32
2025-11-28 13:00:06 -08:00
dependabot[bot]
3608bf7abe chore(deps): bump next from 14.2.29 to 14.2.32
Bumps [next](https://github.com/vercel/next.js) from 14.2.29 to 14.2.32.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v14.2.29...v14.2.32)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 14.2.32
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-28 20:31:51 +00:00
Valerie Pomerleau
4c5abf00f7 Merge pull request #19631 from mozilla/dependabot/npm_and_yarn/next-auth-5.0.0-beta.30
chore(deps): bump next-auth from 5.0.0-beta.22 to 5.0.0-beta.30
2025-11-28 12:27:41 -08:00
dependabot[bot]
5b8d7922aa chore(deps): bump next-auth from 5.0.0-beta.22 to 5.0.0-beta.30
Bumps [next-auth](https://github.com/nextauthjs/next-auth) from 5.0.0-beta.22 to 5.0.0-beta.30.
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/next-auth@5.0.0-beta.22...next-auth@5.0.0-beta.30)

---
updated-dependencies:
- dependency-name: next-auth
  dependency-version: 5.0.0-beta.30
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-28 19:43:11 +00:00
Valerie Pomerleau
9f55521bbd Merge pull request #19697 from mozilla/dependabot/github_actions/actions/checkout-6
chore(deps): bump actions/checkout from 5 to 6
2025-11-28 11:33:32 -08:00
Valerie Pomerleau
67afc202cf Merge pull request #19639 from mozilla/dependabot/npm_and_yarn/pm2-6.0.9
chore(deps): bump pm2 from 5.4.3 to 6.0.9
2025-11-28 11:30:41 -08:00
Valerie Pomerleau
e0aeef27fe Merge pull request #19620 from mozilla/polish-totp-navigation
fix(settings): Nav to signin totp if already enabled
2025-11-28 09:49:49 -08:00
Valerie Pomerleau
664515c2a0 fix(settings): Clear apollo cache on account deletion
Because:

* Cache may linger after account deletion

This commit:

* Clear cache when account is destroyed
* Add functional test for this case

Closes #FXA-12717
2025-11-28 09:46:26 -08:00
Mingyuan Zhao
adec05a17c Merge pull request #19714 from mozilla/FXA-12713
fix(settings): fix confetti placement
2025-11-27 18:13:31 -05:00
Mingyuan Zhao
b872643ea4 Merge pull request #19713 from mozilla/FXA-12707
fix(settings): clear AAL error alert after AAL upgrade
2025-11-27 18:12:34 -05:00
MagentaManifold
9df4100472 fix(settings): fix confetti placement
Because:

* The confetti animation on the signup confirmed sync page is not centered.

This commit:

* makes the confetti animation centered by fixing a regresssion in AppLayout
* marks confetti animation as aria-hidden for accessibility.

Closes FXA-12713
2025-11-27 16:05:06 -05:00
MagentaManifold
9cae1d4068 fix(settings): clear AAL error alert after AAL upgrade
Because:

* AAL error alert lingers after AAL upgrade

This commit:

* clears AAL error alert after AAL upgrade

Closes FXA-12707
2025-11-27 15:26:18 -05:00
elizabeth-ilina
c17c78e33c feat(payments-next): Add expanded payment method metrics in statsd/yardstick
Because:

* We currently report stripe vs paypal subscription payments, but with the introduction of expanded payment methods, we should capture that breakdown in statsd/yardstick

This commit:

* Differentiates between different SubPlatPaymentMethodType when reporting the payment provider.

Closes #PAY-3349
2025-11-27 14:11:40 -05:00
Mingyuan Zhao
8d608edeb7 Merge pull request #19708 from mozilla/FXA-12639
fix(settings): fix create_password redirecting to change_passsword on success
2025-11-27 13:49:37 -05:00
MagentaManifold
b719a6d4b9 fix(settings): fix create_password redirecting to change_password on success
Because:

* create_password redirecting to change_password on success

This commit:

* fixes this issue

Closes #FXA-12639
2025-11-27 13:29:47 -05:00
Liza Ilina
88271fef24 Merge pull request #19696 from mozilla/PAY-3361-add-logic-to-check-eligibility-and-return-churn-intervention-content
feat(payments-next): Add logic to check eligibility and return Churn intervention content
2025-11-27 09:29:41 -05:00
elizabeth-ilina
f5afd520b0 feat(payments-next): Add logic to check eligibility and return Churn intervention content
Because:

We will need to check whether:
* A churn coupon type exists for the offering and interval combo

* A customer is eligible to redeem the churn coupon

This commit:

Adds eligibility check for Stay Subscribed flow, based on the following criteria:
* The churn type coupon exists for offering/interval combo in CMS

* The customer can redeem the churn type coupon (compares customer’s redemption count for Churn intervention ID and redemption limit of Churn Intervention ID in CMS)

* The customer’s subscription for auto-renew is set to false.

Closes #PAY-3361
2025-11-27 09:05:03 -05:00
Valerie Pomerleau
51d41304d6 fix(settings): Prevent duplicate sync merge warnings
Because:

* Users signing in with third party auth might see 2 merge warnings
* ThirdPartyAuth flows (Google/Apple) may switch the email, making early prompts at Index unsafe and causing duplicates.
* Signin previously skipped prompting after email‑first, relying on Index.

This commit:

* Defers can_link_account at Index for accounts that exist and have a linked third‑party provider
* Ensures Signin prompts when not coming from email‑first OR when a linked third‑party account is present
* Clarifies inline comments in Index and Signin to document the deferral logic and legacy behavior

Closes #FXA-12714
2025-11-26 17:03:12 -08:00
dependabot[bot]
9bc320cae2 chore(deps): bump node-forge from 1.3.1 to 1.3.2
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.1...v1.3.2)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-26 22:14:47 +00:00
julianpoyourow
ee9f37a74b feat: move customers to new plan script v2 2025-11-26 18:47:48 +00:00
Dan Schomburg
9370a17a49 Merge pull request #19704 from mozilla/FXA-12694
fix(settings): Sync signin error after setting password
2025-11-24 13:17:43 -08:00
Valerie Pomerleau
d2d4dfa0b5 Merge pull request #19657 from mozilla/FXA-12649
feat(settings): Add code resend for secondary email add
2025-11-24 12:20:15 -08:00
Valerie Pomerleau
2982286443 fix(settings): Sync signin error after setting password
Because:

* Sync sign in was failing after setting a password for third party auth accounts

This commit:

* Fixing issue with fxaLogin, fxaOauthLogin being sent prematurely before keys are available

Closes #FXA-12694
2025-11-24 12:04:21 -08:00
Valerie Pomerleau
61f01fd0fd Merge pull request #19705 from mozilla/FXA-12706
fix(settings): General app err at /settings with integration but not signed in
2025-11-24 11:11:14 -08:00
Dan Schomburg
4afd124022 Merge pull request #19703 from mozilla/restore-verified-flag
task(auth): Restore session verified flag
2025-11-24 10:43:14 -08:00
dschom
f494fb34d9 task(auth): Restore session verified flag
Because:
- We need it for backwards compatiblity

This PR:
- Restores the `verified` flag that was removed when `emailVerifed` and `sessionVerified` flags were added.
2025-11-24 09:20:21 -08:00
Valerie Pomerleau
40536f1867 fix(settings): General app err at /settings with integration but not signed in
Because:

* Loading the link fails if not signed in

This commit:

* Move <Suspense> higher up in the App tree to safely catch lazy loaded children after isSignedIn updates
* Move the fallback navigation to index into a useEffect to avoid navigation during render

Closes #FXA-12706
2025-11-22 23:12:02 -08:00
Dan Schomburg
7e3e1e0944 Merge pull request #19702 from mozilla/make-service-ids-configurable
core(auth): Make SERVICES_WITH_EMAIL_VERIFICATION
2025-11-21 15:49:58 -08:00
dschom
b34e9d6425 chore(auth): Make SERVICES_WITH_EMAIL_VERIFICATION
Because:
- We want to be able to configure the sendVerifySessionEmail behavior

This Commit:
- Adds servicesWithEmailVerification to configuration
2025-11-21 15:27:48 -08:00
Dan Schomburg
b994f5dfe1 Merge pull request #19700 from mozilla/fix-account-bounce-create-bug
bug(shared): Make sure 'undefined' isn't passed to the CreateEmailBounce sproc
2025-11-21 13:49:06 -08:00
dschom
a87104b3cc bug(shared): Make sure 'undefined' isn't passed to the CreateEmailBounce sproc 2025-11-21 13:15:33 -08:00
Dan Schomburg
38dad0e2c9 Merge pull request #19699 from mozilla/config-account-delete
task(auth): Make account deletion on email bounce configurable
2025-11-21 13:13:10 -08:00
dschom
fe0648e427 task(auth): Make account deletion on email bounce configurable
Because:
- We have some reports of emails being reported as bounced when they actually go through
- We want to experiment with account deletion on email bounces

This Commit:
- Adds config to enable / disable account deletion on email bounce
- Logs raw email bounce message for more detailed insight
- Logs info about current context when account isn't deleted
2025-11-21 12:47:29 -08:00
dependabot[bot]
f941390553 chore(deps): bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-21 06:08:23 +00:00
Mingyuan Zhao
e5f3b4cad0 Merge pull request #19694 from mozilla/FXA-12693
fix(settings): fix redirection to email first resulting in infinite loading
2025-11-20 15:23:41 -05:00
Davey Alvarez
8e17193584 Merge pull request #19695 from mozilla/product-config-manager-di-fix
Fix nest container dependency injections
2025-11-20 20:00:05 +00:00
MagentaManifold
0ccd49513f fix(settings): fix redirection to email first resulting in infinite loading
Because:

* redirection from /settings routes to email first due to signed out state results in infinite loading

This commit:

* fixes infinite loading by forcing a refresh with hard navigation

Closes #FXA-12693
2025-11-20 14:59:57 -05:00
Davey Alvarez
94de312c14 Fix keyserver dependencies 2025-11-20 11:37:45 -08:00
Nicholas Shirley
2959b66673 chore(fxa-shared): Connected Services Factory fetch bidnings concurrently
Because:
 - We currently fetch all sessions, devices, and oauthClients in series, and it can be slow

This Commit:
 - Updates the ConnectedServicesFactory to fetch all bindings concurrently and passes results to merge
 - Updates authorized_clients.list to also fetch refresh and access
   tokens concurrently to match how other bindings get multiple data
sources

Closes: FXA-8613
2025-11-19 17:15:09 -07:00
Valerie Pomerleau
b0ff9267d9 fix(settings): Nav to signin totp if already enabled
Because:

* We were seeing some AAL errors on createTotp

This commit:

* Ensure that inline_totp_setup waitf totp status to resolve before starting setup process
* Add a few more navigation intercepts to navigate to signin_totp_code instead of inline_totp_setup if totp already enabled
* Add a couple of tests for inline_totp_setup

Closes
2025-11-19 14:52:01 -08:00
Davey Alvarez
a1d3eab678 Merge pull request #19685 from mozilla/PAY-3369
feat(shared-cms): Fetch Cancel Interstitial Offer
2025-11-19 22:03:50 +00:00
Valerie Pomerleau
791abab408 feat(settings): Add code resend for secondary email add
Because:

* We want to allow a resend option directly on the verification page
* The resend option on settings will no longer be available on the settings page (unconfirmed emails no longer stored in db and there not displayed in settings)
* We want the resend to be authenticated with the email scoped JWT token

This commit:

* Add button to resend confirmation code in PageSecondaryEmailVerify
* Adds success/error banner for code resend
* Include cool-off to prevent successive clicks, including disabled state
* Add unit tests, l10n, storybook states
* Add mfa-authed secondary email code resend endpoint that relies on redis, not unconfirmed email in db, and returns an error if no valid reservation is found
* Add route unit tests for the new resend endpoint
* Add functional test for resend

Closes #FXA-12649
2025-11-19 13:51:27 -08:00
Davey Alvarez
19df582cad feat(shared-cms): Fetch Cancel Interstitial Offer
Because:

* We will be showing customers interstitial offerings to avoid cancellations

This commit:

* Adds in the necessary utils and types to fetch this data from Strapi

Closes #PAY-3369
2025-11-19 13:34:53 -08:00
Dan Schomburg
76358191ba Merge pull request #19690 from mozilla/fix-getCmsInfo-mock
Fix get cms info mock
2025-11-19 12:01:17 -08:00
dschom
34c68fcf5c bug(settings): Make sure getCmsInfo is mocked 2025-11-19 11:44:47 -08:00
Dan Schomburg
e09418c947 Merge pull request #19688 from mozilla/fix-compile-error
bug(settings): Fix merge order issue
2025-11-19 11:12:29 -08:00
dschom
6ab74b8cde bug(settings): Fix merge order issue 2025-11-19 11:10:29 -08:00
dschom
f4eab0f41f bug(settings): Fix merge order issue 2025-11-19 11:08:48 -08:00
Nick Shirley
47d89be2da Merge pull request #19675 from mozilla/rollback/FXA-12531
fix(auth): Roll back FXA-12531 changes to accountDevices
v1.324.0
2025-11-19 11:49:39 -07:00
Mingyuan Zhao
6daf031e30 Merge pull request #19673 from mozilla/FXA-12344
feat(signin): show loading spinner in card
2025-11-19 13:13:56 -05:00