FeatureFuel
4

SDK SSO Login Refresh Token

Source: directus/directus#22427 · opened by @NilsBaumgartner1994
Summary So as of the SSO login method changed to session by default: How to revert this? Or how can i login in my native app via SSO using the sdk? My current approach was to redirect to the app and passing a refresh_token, which currently no longer is possible since i only get the "directus_session_token"? Maybe also consider updating the Doc: To add a hint, that SSO has a different mode. Basic Example _No response_ Motivation The support for SSO login in native apps is rising as of multiple issues listed. Detailed Design As there is a security issue exposing the token in the URL i would propose to add a whitelist of allowred redirects with exposing the refresh_token in the url, so that native apps using deep link can access it. An in-App Browser is also not a secure option, as it could be mocked. Requirements List Must Have: • Improved Documentation hinting that SSO logins are using a different mode. Could Have: • Elaborating a sol…

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests