Closed dostro closed 12 months ago
10 Jan 2023 Meeting Notes:
Potential Solutions
Risks/Concerns
Strengths of static file
Given the importance of this topic and the multiple different approaches being taken right now, I have taken the time to create #16. Hopefully it prompts a lively discussion on how to implement the user-facing consent flow and helps us agree on a common specification that works for all IDPs.
Problem: Developers may want to call other canisters as the authenticated user, but don't have a way of doing that when using an identity provider that generates new principals for each domain.
Requirements:
Thoughts on a solution: @frederikrothenberger suggested a potential solution where, similar to
.well-known
for alternative origins, developers set up something like.well-known/proxy
to expose metadata on trusted endpoints and their descriptions (with support for internationalization).