Should be as easy as entering the URL of the master, which initiates a FB/Twitter/Google like 'app authentication' where the user is redirected to a login on the master (or skipping directly to the next step if already logged in), and being asked to confirm the hookup (if the user have the appropiate permissions, of course).
There'll be some key exchange done in the background for future communication, but it's important to remember that the client might only be reachable from the local machine (we assume that the client can always communicate with the master), so callbacks from the master is not an option.
Should be as easy as entering the URL of the master, which initiates a FB/Twitter/Google like 'app authentication' where the user is redirected to a login on the master (or skipping directly to the next step if already logged in), and being asked to confirm the hookup (if the user have the appropiate permissions, of course).
There'll be some key exchange done in the background for future communication, but it's important to remember that the client might only be reachable from the local machine (we assume that the client can always communicate with the master), so callbacks from the master is not an option.