You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Sep 3, 2020. It is now read-only.
On the teach site, there are two different ways a user could end up at the oauth2 authorize endpoint on id.webmaker.org:
By clicking the "login" link, in which case the user expects to be prompted for their username/password.
By clicking the "sign up" link, in which case the user expects to sign up.
I'm thinking that this intent could be conveyed by an intent argument to the authorize endpoint. For example, intent=login could indicate to the authorize endpoint that the user wants to login, while intent=signup could indicate that the user wants to sign up.
I'm thinking it could be the burden of the oauth2 client (not id.webmaker.org) to keep track of what the original intent was when the oauth2 callback is triggered. In other words, id.webmaker.org doesn't need to pass intent back to the callback when the user is done logging in or signing up.
toolness
changed the title
Implement and document "intent" argument for authorize endpoint
Implement and document "action" argument for authorize endpoint
Apr 8, 2015
toolness
changed the title
Implement and document "action" argument for authorize endpoint
Implement "action" argument for authorize endpoint
Apr 9, 2015
On the teach site, there are two different ways a user could end up at the oauth2 authorize endpoint on id.webmaker.org:
I'm thinking that this intent could be conveyed by an
intent
argument to the authorize endpoint. For example,intent=login
could indicate to the authorize endpoint that the user wants to login, whileintent=signup
could indicate that the user wants to sign up.I'm thinking it could be the burden of the oauth2 client (not id.webmaker.org) to keep track of what the original intent was when the oauth2 callback is triggered. In other words, id.webmaker.org doesn't need to pass
intent
back to the callback when the user is done logging in or signing up.This should be documented in
docs/oauth.md
too.The text was updated successfully, but these errors were encountered: