Bug #111
Fix AMO signing of extensions
Status:
Rejected
Priority:
High
Assignee:
-
Start date:
02/25/2022
Due date:
% Done:
0%
Estimated time:
Description
When trying to get Haketilo signed by Mozilla I found out my old Firefox API keys no longer work (it seems Mozilla expires those keys whenever it wants add-on devs to accept its amended agreement). Generation of new keys without nonfree software relied on Jahoti's mozoid.py1 which stopped working after Mozilla had changed how it passes its anti-CSRF token to the browser.
I looked at Jahoti's Python code and Mozilla server's responses. The csrf token/cookie used to be present in a <meta>
tag of a page served by Mozilla but this is no longer the case. I don't want to make delays digging into this issue right now, I may focus on this after #107
-
and also on librecaptcha but I hope this one still works ↩