Open sa5bke opened 4 years ago
For this to work, both the app must have a QR scanner function, and the OS-level QR-scanner must be able to find our app when a Wi-Fi configuration is scanned.
We need some discussion on how this would work. Can we make a QR-code with a special schema, such as letswifi://qr_callback
, with a base64 payload, where the OS is able to find the app in the App Store or Play Store if it was not installed yet?
This is not only unconvenient for the users, but also a security concern. We do not want the users to type their password into an unknown app, but use a web browser that they are used to, where they can see the URL and and also know that the certificate of web server is valid.
I think it would be useful to be able to start the onboarding process via a web browser and continue on the phone/tablet. The reason is that our IDP needs two factor login which is easier to use on a computer compared to a phone/tablet.
I see that it might look something like this:
If it is the actual certificate that is transferred via the QR code (if that would be possible) or just a token to connect the sessions together is fine both ways, at least for my use case.