News for hackers. Stuff that matters.

A comment on OAuth for the Open Web. Parent comment

Re:OAuth for the Open Web by dane-pgp on Saturday July 07, 2018 @08:03PM (#17481375)
If browsers were to support this, there would be some tricky UI/UX questions about how readily the browser provides information to a new website about accounts you have on other sites.

Such a feature might best be specified as an extension to this API:

https://developer.mozilla.org/en-US/docs/Web/API/Credential_...

which although experimental does have some level of browser support.

[ Parent | on HN ]
Re:OAuth for the Open Web by dwaite on Sunday July 08, 2018 @09:14PM (#17487297)
The web credential API is meant to be an integration point for passwords and AccountChooser in your browser. But I don't know if any other browsers than Chrome plan to implement it.
[ Parent | on HN ]
Re:OAuth for the Open Web by lwf on Sunday July 08, 2018 @01:31AM (#17482305)
Don't expose it to the web page, but treat it as a native UI control.
[ Parent | on HN ]