Welcome Guest, Not a member yet? Register   Sign In
Login with oAuth
#1

Hello guys
I come back again
My question is :
Can i use token oAuth2 instead of user's login to app?
Example:
Use login to app
If he/she can login to app,so create token with oauth and return to app and app send token for user command
Reply
#2

If the user logins into Twitter or Facebook etc: From your login screen
then yes you can login them into the app, you will get an error if Twitter
or Facebook cannot log them in.

So if the Twitter or Facebook logs in ok! Then you know you can log them into
your system.
What did you Try? What did you Get? What did you Expect?

Joined CodeIgniter Community 2009.  ( Skype: insitfx )
Reply
#3

(02-26-2018, 06:20 AM)InsiteFX Wrote: If the user logins into Twitter or Facebook etc: From your login screen
then yes you can login them into the app, you will get an error if Twitter
or Facebook cannot log them in.

So if the Twitter or Facebook logs in ok! Then you know you can log them into
your system.

I dont use facebook or twitter
I want to use this authorize in app only and dont use other token for validate user
Thanks
Reply
#4

Well if you are sure that the users token is valid they you could encrypt it to the database
and use it for logging the user in.

But watch out for security leaks in your code...
What did you Try? What did you Get? What did you Expect?

Joined CodeIgniter Community 2009.  ( Skype: insitfx )
Reply
#5

(02-27-2018, 04:22 AM)InsiteFX Wrote: Well if you are sure that the users token is valid they you could encrypt it to the database
and use it for logging the user in.

But watch out for security leaks in your code...

It is good so
Do auth have leaks?
Reply
#6

I would just do checks to make sure there is no way for cross site forgery.

Check your inputs and make sure you are getting what you are expecting to get.
What did you Try? What did you Get? What did you Expect?

Joined CodeIgniter Community 2009.  ( Skype: insitfx )
Reply
#7

(02-28-2018, 04:21 AM)InsiteFX Wrote: I would just do checks to make sure there is no way for cross site forgery.

Check your inputs and make sure you are getting what you are expecting to get.

Thanks
Reply




Theme © iAndrew 2016 - Forum software by © MyBB