search

privacycg / is-logged-in

The IsLoggedIn API
93 stars 10 forks source link

Consider IsLoggedIn as requirement for document.requestStorageAccess() #23

Open johnwilander opened 4 years ago

johnwilander commented 4 years ago

The Storage Access API and its document.requestStorageAccess() is intended for authenticated embeds. We should consider a requirement to have IsLoggedIn be set to be able to be granted storage access as a third-party.

jameshartig commented 4 years ago

This is related to #19.

Also, how do you envision this working in practice? Assuming I can tell that the user is not logged in and then they click a "Sign In" button, I would be able to set isLoggedIn before I call document.requestStorageAccess()? How does that relate to document.requestStorageAccess() requiring a user gesture?