Support for cross-domain authentication

Created on 30 May 2022, over 2 years ago

Problem/Motivation

Is there any chance the project is willing to implement or take in patches which will implement cross domain authentication?

Or is this something that strongly goes against the project's roadmap/philosophy.

I believe this is one of the most seamless SSO modules I've tried so far requiring no other third parties, with the only limitation being cross domain support.

Steps to reproduce

N/A

Proposed resolution

Provide cross domain authentication support, where if it detects that a slave site is on a different domain, it does it a redirect with a special bakeryAuthToken GET parameter which contains encoded hmac data which can then be decoded and used to authenticate (and set the appropriate cookies and login).

It can also be behind a configuration flag if this is a feature that needs to be opted in for.

Remaining tasks

Provide issue fork/patch.

User interface changes

N/A.

API changes

Includes API and methods to facilitate cross domain authentication.

Data model changes

N/A.

Feature request
Status

Active

Version

2.0

Component

Code

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024