w3c-fedid / FedCM

A privacy preserving identity exchange Web API
https://w3c-fedid.github.io/FedCM/
Other
375 stars 72 forks source link

PP/TOS requirements are different from auto reauthentication #626

Closed npm1 closed 2 months ago

npm1 commented 2 months ago

Currently the spec makes it sound like these two are the same, but they are not. PP/TOS may not be shown if the IdP requests it, whereas auto reauthentication may only occur if the browser knows that this account was previously used.