logto-io / logto

🧑‍🚀 The better identity infrastructure for developers and the open-source alternative to Auth0.
https://logto.io
Mozilla Public License 2.0
8.49k stars 418 forks source link

feat(core): allow oauth and apple app connecter bind using admin api #6145

Closed 5aaee9 closed 1 month ago

5aaee9 commented 3 months ago

Summary

I'm implementing a user panel that allows users to bind third-party accounts, but I found that Apple accounts cannot be bound.

This change enables a way for third-party apps to bind Apple and OAuth when using the admin API.

Testing

Create an authorization URI using the Apple connector and bind it to the user

Checklist

github-actions[bot] commented 3 months ago

COMPARE TO master

Total Size Diff :chart_with_upwards_trend: +450 Bytes

Diff by File |Name|Diff| |---|---| |packages/core/src/routes/admin-user/social.ts|:chart_with_upwards_trend: +281 Bytes| |packages/core/src/routes/connector/authorization-uri.ts|:chart_with_upwards_trend: +169 Bytes|
charIeszhao commented 3 months ago

Thanks for your contribution, @5aaee9! We're evaluating your solution, and will update you once it's done.

5aaee9 commented 2 months ago

@charIeszhao

We are developing an app with a completely customizable onboard interface and process, and we want users to be able to sign in or register through social login methods.

When I was writing this, I believed that app using Management API should be trusted and therefore sent the state to the application creating the redirect_url.

How about the state on the server side? (which might require creating a new database table to store relevant information) this could lead to significant changes.

github-actions[bot] commented 2 months ago

This PR is stale because it has been open 10 for days with no activity. Remove stale label or comment or this will be closed in 5 days.

wangsijie commented 2 months ago

Hi @5aaee9, we are currently working on "Profile API" which allows the end user to update profile data including social identities directly using the "access token".

github-actions[bot] commented 1 month ago

This PR is stale because it has been open 10 for days with no activity. Remove stale label or comment or this will be closed in 5 days.