Relax the login status requirement from same-origin to same-site

fedidcg / FedCM

A privacy preserving identity exchange Web API

https://fedidcg.github.io/FedCM

Other

357 stars 66 forks source link

Relax the login status requirement from same-origin to same-site #538

Open cbiesinger opened 5 months ago

cbiesinger commented 5 months ago

Some IDPs have their login on one subdomain but the FedCM endpoint on a different subdomain, and this change lets them set the login status on the correct origin.

Bug: #537

Preview | Diff

npm1 commented 5 months ago

Maybe edit your description so that is actually links the issue?

cbiesinger commented 5 months ago

Maybe edit your description so that is actually links the issue?

Could've sworn I already did that... anyway, done now.

cbiesinger commented 5 months ago

@bvandersloot-mozilla , does this look reasonable to you?