search

privacycg / is-logged-in

The IsLoggedIn API
94 stars 10 forks source link

Support Account Chooser: IDPs that support multiple users logged in at the same time #20

Open gffletch opened 4 years ago

gffletch commented 4 years ago

Many IDPs allow multiple users to be logged in at the same time or allow multiple different users to be logged in from the same browser (even at different times). You see this experience when logging into Google and many other sites. Today, this state is managed via local storage so that the IDP can display users who are either currently logged in or have logged in from this browser in the past. This is a must better user experience when the user wants to login again.

Is this in scope of IsLoggedIn? and if not, how does a logout event affect this data?

johnwilander commented 4 years ago

Hi! Thanks for filing. This has been discussed to some extent previously, as can be seen in the "Feedback Received" section of the explainer. Specifically this:

Multi-Login and Multiple User Profiles

The user may have multiple accounts for one website, multiple users may be using the same browser to log in to a specific website (shared device case), and some websites allow multiple concurrent logins with fast profile switching. In the case of multiple concurrent logins, there may be a dominant or operating account among them.

I will file a separate issue for the above to keep yours for identity providers since that is a separate case. We can merge them later you believe they can be handled in one issue.

johnwilander commented 4 years ago

Filed as: https://github.com/privacycg/is-logged-in/issues/21