search

janat08 / makpal

MIT License
0 stars 2 forks source link

SSO authentication #34

Open janat08 opened 5 years ago

janat08 commented 5 years ago

It's not easy to test as for the security reasons the authenticating service (google/etc) may demand things that take a proper server to meet (encrypted connection).

janat08 commented 5 years ago

Relevant links and keys in makpal handoff.txt Yandex seems to have had testing endpoint, with facebook being redicilous about permissions, and google offering re-logging.

janat08 commented 5 years ago

redirect back from SSO by reading cookies. there's no way of reading history for privacy reasons. take the redirect back stream and cookie that.

janat08 commented 5 years ago

removeToken on logout (jwt)