search

humhub / app

18 stars 7 forks source link

Fix external Auth #78

Closed PrimozRatej closed 1 year ago

PrimozRatej commented 1 year ago

Modules Tested and redirect URIs added to WebView whitelist: LinkedIn Sign-In ✅ Facebook Sign-In ✅ GitHub Sign-In ✅  Twitter Sign-In (Didn't find documentation and I believe It's only paid version) Discord Integrations ✅  Live (Microsoft) Sign in ✅  Two-Factor Authentication (2FA) ✅

For now, I took into the account opener state but I think it will be more correct in the future to just use a whitelist for URI redirects.

ArchBlood commented 1 year ago

Currently the Twitter API should not be used due to them still switching to OAuth 2.0 fully, not to mention a lot of scopes not implemented or are scheduled for rework.