geteduroam / mobile-app

Next-gen mobile app for geteduroam
BSD 3-Clause "New" or "Revised" License
1 stars 4 forks source link

Begin onboarding via webbrowser #106

Open sa5bke opened 4 years ago

sa5bke commented 4 years ago

I think it would be useful to be able to start the onboarding process via a web browser and continue on the phone/tablet. The reason is that our IDP needs two factor login which is easier to use on a computer compared to a phone/tablet.

I see that it might look something like this:

If it is the actual certificate that is transferred via the QR code (if that would be possible) or just a token to connect the sessions together is fine both ways, at least for my use case.

jornane commented 4 years ago

For this to work, both the app must have a QR scanner function, and the OS-level QR-scanner must be able to find our app when a Wi-Fi configuration is scanned.

We need some discussion on how this would work. Can we make a QR-code with a special schema, such as letswifi://qr_callback, with a base64 payload, where the OS is able to find the app in the App Store or Play Store if it was not installed yet?

sa5bke commented 4 years ago

This is not only unconvenient for the users, but also a security concern. We do not want the users to type their password into an unknown app, but use a web browser that they are used to, where they can see the URL and and also know that the certificate of web server is valid.