hemantjadon/angular2-social-auth

angular2-social-auth's Issues

Init

[Help Wanted] callback of social auth.

Place of issue.

When started to write the code for social auth google login.

Type:

The OAuth providers require a redirect_uri.

Description:

The main issue faced with wiring up the social login in javascript apps, is that there is no common schema for doing so.

• You have a url, generally of type https://dev.provider.com/oauth/<api_version>/?client_id=<key>&redirect_uri=<URL>.
• when we redirect the user from the clent using the configration object, we end up getting back to the
  <redirect_uri> page, which corresponds to a view which does not have any prior knowledge of the source of the login flow.
• now the problem which arises is that as soon as the user is redirected to that page,
  we cannot call the proper function corresponding to, to the response from the provider.

How i think it should be resolved:

• We use promises to fire up the the login flow.
• When user responds, we get redirected to redirect_uri.
• now there must be some mechanism which stamps the data from this url and resolves the promise.
• I really don't know how it is possible to resovle a promise after the redirect, (we can't use ajax initially to fire up the consent page).

Implementations which I have seen :

• Google's main JS Client side library : https://developers.google.com/identity/sign-in/web/sign-in
  • This is entire Promise driven approach in which the response comes back in form of JSON.
• Facebook's JavascriptSDK :
  • This is Facebook's approach for the same.

The internals of both these approach, similar on the surface.

Required information :

• Is there any safe and secure way for implementing this login flow?
• Is it possible to get client side JS apis to implement this flow of other providers (except Facebook and Google)?
• If this is not at all possible then, how to incorporate general client side Social Authentication, For Angular2 apps?

Any help or even discussion is welcomed.