One of the problem when doing full HTML5 apps is the Authentication.
With Firefox Account, the OAuth dance implies a server. Here are some tips that we are using to provide the Oauth token to the client app after the Oauth dance.
- First add a button to the login page: GET /fxa-oauth/login?redirect=https://web-ui/#login-cb
- When the user clicks it will do the oauth-dance and come back to your redirect endpoint.
- At this time just GET /fxa-oauth/token to get the user oauth-token.