GitHub Community Forum

Re:GitHub Community Forum by always_good on Tuesday November 14, 2017 @02:51AM (#15693446)

It links a great deal to Github on its homepage, yet none of the Github links mention it or link back to it. My first impression was that someone was trying to bootstrap a forum by looking to look official.

I suppose it's just not launched yet. Else you'd at least expect a blog post.

[ Parent | on HN ]

Re:GitHub Community Forum by Cthulhu_ on Tuesday November 14, 2017 @04:03AM (#15693688)

I think they'd launch it on one of the upcoming Constellation events, given how that's pretty prominent on the home page.

[ Parent | on HN ]

Re:GitHub Community Forum by chrismorgan on Tuesday November 14, 2017 @02:58AM (#15693467)

The registrant details in the whois are GitHub’s, and the name servers match. Seems likely to be genuine.

[ Parent | on HN ]

Re:GitHub Community Forum by oneeyedpigeon on Tuesday November 14, 2017 @04:50AM (#15693824)

I hope so, clicking on 'sign in' logged me into my github account with no further action. Does anyone know how they did that?

[ Parent | on HN ]

Re:GitHub Community Forum by breakingcups on Tuesday November 14, 2017 @05:04AM (#15693877)

You're probably already logged in on the main Github.com domain.

You were redirected from the community domain to the main domain to log in. Once there, the system saw you were already logged in and redirected you back to the community site with some proper tokens in the url to identify you.

[ Parent | on HN ]

Re:GitHub Community Forum by oneeyedpigeon on Tuesday November 14, 2017 @07:11AM (#15694361)

But they're different domains; how are they identifying me as a client?

[ Parent | on HN ]

Re:GitHub Community Forum by kroltan on Tuesday November 14, 2017 @07:16AM (#15694387)

github.community isn't. It sends you to github.com regardless, since their login is there. github.com sees you're already logged in, and redirects back, passing auth.

[ Parent | on HN ]

Re:GitHub Community Forum by chrismorgan on Tuesday November 14, 2017 @07:39AM (#15694497)

That suggests it’s bypassing OAuth—with OAuth you’d get a “GitHub Community wants access to X, Y and Z” interstitial.

[ Parent | on HN ]

Re:GitHub Community Forum by jon-wood on Tuesday November 14, 2017 @12:36PM (#15697240)

Most OAuth providers have a flag for first party clients which allows them to bypass the usual authorization dance and just bounce you straight back to the origin.

[ Parent | on HN ]

Re:GitHub Community Forum by Crespyl on Tuesday November 14, 2017 @11:11AM (#15696259)

Unless it's by the same authors as GitHub, and has access to the same OAuth client id/secrets as the master GitHub app.

[ Parent | on HN ]