WIP - Worktree fxa 13072#20353

Draft

dschom wants to merge 68 commits intomainfrom

worktree-FXA-13072

Commits on Apr 8, 2026

chore(deps): bump node-forge from 1.3.2 to 1.4.0

dependabot[bot]
authored and
dschom
committed
feat(auth): add StatsD metrics for passwordless OTP and account status check

vbudhram
authored and
dschom
committed
chore: update aws-sdk

toufali
authored and
dschom
committed
chore: update jsonwebtoken

toufali
authored and
dschom
committed
fix(auth): Add missing security event name to db

nshirley
authored and
dschom
committed
feat(auth): Add email verify regex bypass

nshirley
authored and
dschom
committed
feat(ui): Add web integration, desktop-only promo: mobile download QR code

LZoog
authored and
dschom
committed
feat(glean): Capture 'scopes' in oauth access token creation Glean event

LZoog
authored and
dschom
committed
chore: add resolution for multer 2.1.1

toufali
authored and
dschom
committed
chore(deps): bump brace-expansion from 1.1.12 to 1.1.13

dependabot[bot]
authored and
dschom
committed
fix(payments): send subscription welcome email for otp

StaberindeZA
authored and
dschom
committed
FXA-13359 - Add `brand_id` in the zendesk ticket creation request

bakulf
authored and
dschom
committed
chore(db-migrations): vendor mysql-patcher to eliminate supply chain risk

vbudhram
authored and
dschom
committed
fix(scripts): flush PM2 logs in clean-start to prevent stale error detection

vbudhram
authored and
dschom
committed
fix(payments-next): Upgrading subscription set to cancel does not unset cancelled_for_customer_at

elizabeth-ilina
authored and
dschom
committed
chore(docs): Latest legal PDFs

Pdf Bot
authored and
dschom
committed
chore(skills): scope fxa-simplify to only refine lines changed in the diff

vbudhram
authored and
dschom
committed
feat(payments-next): Add FreeTrialEnding email

david1alvarez
authored and
dschom
committed
feat(): include credentials for passwordless enpoints to allow WAF rules

toufali
authored and
dschom
committed
chore(claude): add skills, improve CLAUDE.md, fix VS Code config

vpomerleau
authored and
dschom
committed
fix(payments-next): Subscription reminder emails showing exclusive tax for non-US customers

elizabeth-ilina
authored and
dschom
committed
feat(passkey): create passkey management API endpoints

MagentaManifold
authored and
dschom
committed
feat(payments-next): Add t&cs for free trials

xlisachan
authored and
dschom
committed
fix(settings): cached passwordless Sync signin on mobile stuck on sign-in page

vbudhram
authored and
dschom
committed
fix(settings): make non-transparent CMS header push page content down

MagentaManifold
authored and
dschom
committed
feat(auth): Wrap amplitude in config to enable/disable

nshirley
authored and
dschom
committed
chore(deps): bump @xmldom/xmldom from 0.8.10 to 0.8.12

dependabot[bot]
authored and
dschom
committed
fix(settings): otp nonsync signup redirect fix

StaberindeZA
authored and
dschom
committed
test storybook fix for 404 image on hosted storybook

vpomerleau
authored and
dschom
committed
ensure storybook config changes trigger storybook rebuild and deployment

vpomerleau
authored and
dschom
committed
fix(settings): pass isPasswordlessFlow through handleNavigation to TOTP page

vbudhram
authored and
dschom
committed
feat(): enable passwordless POST CORS requests

toufali
authored and
dschom
committed
chore(auth): Remove skipConfirmationForEmailAddresses config

nshirley
authored and
dschom
committed
test(auth-server): migrate script and remote tests from Mocha to Jest

vbudhram
authored and
dschom
committed
Uploading svg image for split layout

ipsita-chandak
authored and
dschom
committed
fix(settings): better ux on send code error

StaberindeZA
authored and
dschom
committed
fix(l10n): Replace straight quotes with typographical quotes

bcolsson
authored and
dschom
committed
chore(deps): bump defu from 6.1.4 to 6.1.6

dependabot[bot]
authored and
dschom
committed
fix(settings): fix OTP engage timing and add change email glean metric

vbudhram
authored and
dschom
committed
chore(deps): Upgrade Storybook to v8

vpomerleau
authored and
dschom
committed
chore(deps): bump bn.js from 5.2.2 to 5.2.3

dependabot[bot]
authored and
dschom
committed
chore(deps): bump yauzl from 3.2.0 to 3.3.0

dependabot[bot]
authored and
dschom
committed
fix(func-tests): update otp tests for prod

StaberindeZA
authored and
dschom
committed
fix(eventbroker): Use timestamp not changeTime for event metrics

nshirley
authored and
dschom
committed
chore(settings): replace fxa-common-password-list npm package with vendored lib

vbudhram
authored and
dschom
committed
feat(auth-client): add passkey registration and management methods

MagentaManifold
authored and
dschom
committed
fix(settings): remove unnecesssary calls in Account.refresh

MagentaManifold
authored and
dschom
committed
fix(admin-server):

elizabeth-ilina
authored and
dschom
committed
chore(git): Gitignore Firebase cache

vpomerleau
authored and
dschom
committed
feat(payments-next): Add Free Trial information to PurchaseDetails

xlisachan
authored and
dschom
committed
fix(auth): offset TOTP delta histogram to avoid negative StatsD values

vbudhram
authored and
dschom
committed
fix(next): add missing connect csp

StaberindeZA
authored and
dschom
committed
feat(passkeys): Split the feature flag for passkeys

vpomerleau
authored and
dschom
committed
chore(deps): bump yaml from 1.10.2 to 1.10.3

dependabot[bot]
authored and
dschom
committed
feat(payments-next): Add Free Trial section to Subscription Management page

elizabeth-ilina
authored and
dschom
committed
feat(ci): run storybook cleanup daily

MagentaManifold
authored and
dschom
committed
feat(payments-next): Add FxA Webhook support

david1alvarez
authored and
dschom
committed
chore(auth-server): remove Mocha and split CI test workflows

vbudhram
authored and
dschom
committed
fix(payments-next): Add Glean telemetry endpoint to CSP

xlisachan
authored and
dschom
committed
fix(settings): add hasFunction to grunt for more unique ftl hashes

nshirley
authored and
dschom
committed
fix(auth): Provide sessionVerified on passwordChange handler

nshirley
authored and
dschom
committed
feat(payments-next): Cancel free trial on upgrade

david1alvarez
authored and
dschom
committed
feat(ui): For new send tab entrypoints, always navigate directly to /pair

LZoog
authored and
dschom
committed
feat(auth): add email-scoped report-only rate limits for passwordless OTP verify

vbudhram
authored and
dschom
committed
chore(admin-server): remove dead GraphQL code, allowlist config, and gql:allowlist build steps

vbudhram
authored and
dschom
committed
fix(func-tests): pass WAF bypass header to passwordless API calls

vbudhram
authored and
dschom
committed
fix(passkeys): gate rpId/allowedOrigins validation on enabled flag

vpomerleau
authored and
dschom
committed

Commits on Apr 9, 2026

wip(settings): passkey registration UI flow

dschom
and
claude
committed