Bug 2062629 - Lock the FELT session on browser restart - #1353

Draft

jporter-dev wants to merge 24 commits into

mozilla:enterprise-mainfrom

jporter-dev:persist-session-on-browser-restart

Commits on Sep 3, 2026

Bug 2064395 - Add FELT session locking infrastructure to persist session behind OS auth

fiji-flo
authored and
jporter-dev
committed
eddea3e
Bug 2064395 - Lock or sign out the FELT session on browser close via a policy helper
jporter-dev
committed
a4f1a39
Bug 2064395 - Harden FELT session unlocks against decrypt failures and concurrent submits
jporter-dev
committed
ff6e6e7
Bug 2064395 - Reconcile the persisted FELT token and gate on the pref
jporter-dev
committed
734e74e
Bug 2064395 - Rework FELT locking config and drive Felt UI persistence from lock signals
jporter-dev
committed
b28ff54
Bug 2064395 - Show an Unlock button on the FELT login when the entered account has a locked session
jporter-dev
committed
413a360
Bug 2064395 - Localize the FELT unlock OS auth prompt and make OS-specific
jporter-dev
committed
4e39aa0
Bug 2064395 - Clean up FELT locking documentation
jporter-dev
committed
26327a3
Bug 2064395 - Lock the FELT session locking pref by default
jporter-dev
committed
d7a5e73
Bug 2064395 - Clean up the FELT locking test setup
jporter-dev
committed
7fbc6f0
Bug 2064395 - Move locking token encryption into FeltStorage
jporter-dev
committed
3f579d0
Bug 2064395 - Show the sign-out dialog for explicit sign-out even when locking is enabled
jporter-dev
committed
7d6cb6a
Bug 2064395 - Commit resumed session tokens through the StartFirefox message
jporter-dev
committed
3db3615
Bug 2064395 - Add helpers for storing and clearing tokens
jporter-dev
committed
b30cb48
Bug 2064395 - Only run lock on close in FELT browser
jporter-dev
committed
a51a9e5
Bug 2064395 - Make the SignOut policy live
jporter-dev
committed
8adb9c4
Bug 2064395 - Drain in-flight token refresh before locking
jporter-dev
committed
5a41a0c
Bug 2064395 - Stub OSKeystore in the lock-on-close marionette test
jporter-dev
committed
5f93cc5
Bug 2064395 - Add description for SignOut policy
jporter-dev
committed
65d1136
Bug 2064395 - Fix credential lifecycle and exit routing for session locking
jporter-dev
committed
8e27c47
Bug 2064395 - Collect and submit device posture when unlocking a session
jporter-dev
committed
b641286
Bug 2064395 - Rework locking to send the lock intent with the exit event
jporter-dev
committed
5f93a61
Bug 2064395 - Rework posture collection, fix l10n strings, and fix stale token on store failure
jporter-dev
committed
1f60c29

Commits on Sep 4, 2026

Bug 2064395 - Lock the FELT session on update-driven restart
jporter-dev
committed
48a7edf

Navigation Menu

Uh oh!

Bug 2062629 - Lock the FELT session on browser restart - #1353

Bug 2062629 - Lock the FELT session on browser restart#1353
jporter-dev wants to merge 24 commits into
mozilla:enterprise-mainfrom
jporter-dev:persist-session-on-browser-restart

Commits on Sep 3, 2026

Bug 2064395 - Add FELT session locking infrastructure to persist session behind OS auth

Bug 2064395 - Lock or sign out the FELT session on browser close via a policy helper

Bug 2064395 - Harden FELT session unlocks against decrypt failures and concurrent submits

Bug 2064395 - Reconcile the persisted FELT token and gate on the pref

Bug 2064395 - Rework FELT locking config and drive Felt UI persistence from lock signals

Bug 2064395 - Show an Unlock button on the FELT login when the entered account has a locked session

Bug 2064395 - Localize the FELT unlock OS auth prompt and make OS-specific

Bug 2064395 - Clean up FELT locking documentation

Bug 2064395 - Lock the FELT session locking pref by default

Bug 2064395 - Clean up the FELT locking test setup

Bug 2064395 - Move locking token encryption into FeltStorage

Bug 2064395 - Show the sign-out dialog for explicit sign-out even when locking is enabled

Bug 2064395 - Commit resumed session tokens through the StartFirefox message

Bug 2064395 - Add helpers for storing and clearing tokens

Bug 2064395 - Only run lock on close in FELT browser

Bug 2064395 - Make the SignOut policy live

Bug 2064395 - Drain in-flight token refresh before locking

Bug 2064395 - Stub OSKeystore in the lock-on-close marionette test

Bug 2064395 - Add description for SignOut policy

Bug 2064395 - Fix credential lifecycle and exit routing for session locking

Bug 2064395 - Collect and submit device posture when unlocking a session

Bug 2064395 - Rework locking to send the lock intent with the exit event

Bug 2064395 - Rework posture collection, fix l10n strings, and fix stale token on store failure

Commits on Sep 4, 2026

Bug 2064395 - Lock the FELT session on update-driven restart