Firefox Accounts OAuth support for WebExtensions

This document is a work in progess draft

This page will help you integrate your WebExtension with Firefox Accounts. Before beginning this process, make sure to read about the Firefox Accounts OAuth API.  

FxA Web Extension login flow

Your WebExtension must register as a Firefox Accounts relier with a specific WebExtension redirect URL.

Derived encryption keys

Besides just getting the "Bearer Token" (as seen above), there is a plan to provide a way for reliers to fetch keys derived from user's FxA password. To get a derived key the relier can request a `"keys"` scope in the OAuth request. 

Document Tags and Contributors

 Last updated by: vladikoff,