paypal / here-sideloader-api-samples

Sideloader API samples that enable to integrate PayPal Here into other apps
Other
25 stars 32 forks source link

auto login to PayPalHere #23

Closed dacology closed 9 years ago

dacology commented 9 years ago

It would be great if we could pass the user/creds over to the paypalHere app from the requesting app, so that we don't have to login to paypal here eachtime manually?

Is this possible? I know payleven device allows this, so there must be a way to consider it secure?

jaredegan commented 9 years ago

Hi, since the password is passed in plaintext via the URL, I don't see how this could be made to be secure. Also, with the way that iOS works, I believe the first app installed to claim a URL scheme gets it until the app is installed. And there's no way for apps to officially claim URL schemes, they can register for as many as they want. This means some bad app could register for the "paypalhere://" URL scheme and intercept the password.

Sorry, but this is a problem we're not ready to solve at this point.