search

calebmer / connect

10 stars 2 forks source link

Single Sign On (SSO) / OAuth2 / OpenID Connect / Social Login #71

Open brenthaertlein opened 5 years ago

brenthaertlein commented 5 years ago

It is vastly beneficial for web apps to enable users to sign up and log in to a service using OAuth2 (https://tools.ietf.org/rfc/rfc6749.txt).

Additionally, OAuth2 (Google, et. al) and OAuth2-like (Facebook) sign-on integrations allow users to sign up with existing Social Media accounts which provides ease of access for users and offloads many security concerns from the Connect application, as well as granting access to a wealth of personal information about a user's account (within the OAuth2 scope granted by the Identity Provider). This allows Connect to collect and use/display information about the user without the user having to manually type in information like First Name, Last Name, etc.

When an OAuth2 login from a Social Media account it used, it also absolves the application of the responsibility to handle maintenance of the credentials. See relevant issues about forgot/reset/change password below.

Related #66 Related #68 Related #69

calebmer commented 5 years ago

We’ve also got login with Apple now 😛

Worth noting that Apple will make it mandatory to add “login with Apple” if you have login with another social media provider like Facebook or Google.