News for hackers. Stuff that matters.

A comment on Container Tabs. Parent comment

Re:Container Tabs by sleavey on Sunday January 22, 2017 @07:11AM (#13454843)
StackOverflow, sadly. Their Javascript requires some off site cookies to allow for their cross domain user account stuff. Not enabling third party cookies on the StackExchange sites leads to broken pages.
[ Parent | on HN ]
Re:Container Tabs by untoreh on Sunday January 22, 2017 @08:33AM (#13455110)
Wouldn't that be the case for any site using sso?
[ Parent | on HN ]
Re:Container Tabs by sleavey on Sunday January 22, 2017 @09:22AM (#13455268)
Yes, though there are some ways around this. You could send the user to another domain to sign in using a unique request ID that identifies the user. After authenticating this unique ID can be communicated back to the first site to show the user has authenticated, and a cookie could keep the session information. That wouldn't give a seemless sign-in on every site, though - you'd need one cookie (and one sign-in) per domain.

The other way is to have all StackExchange sites be subdomains of stackexchange.com - which is how the designers of the web intended it to be, I think.

[ Parent | on HN ]