4
SDK SSO Login Refresh Token
Source: directus/directus#22427 · opened by @NilsBaumgartner1994
Summary So as of the SSO login method changed to session by default: How to revert this? Or how can i login in my native app via SSO using the sdk? My current approach was to redirect to the app and passing a refresh_token, which currently no longer is possible since i only get the "directus_session_token"? Maybe also consider updating the Doc: To add a hint, that SSO has a different mode. Basic Example _No response_ Motivation The support for SSO login in native apps is rising as of multiple issues listed. Detailed Design As there is a security issue exposing the token in the URL i would propose to add a whitelist of allowred redirects with exposing the refresh_token in the url, so that native apps using deep link can access it. An in-App Browser is also not a secure option, as it could be mocked. Requirements List Must Have: • Improved Documentation hinting that SSO logins are using a different mode. Could Have: • Elaborating a sol…
No pledges yet. Be the first to back this.
Comments
Similar requests
Ability to login to directus using access token of a configured provider.
2 votes · 0 comments
Support SSO login for native apps
6 votes · 0 comments
Enable login with JWT from IdP via API
3 votes · 0 comments
Introduce UI-Based Configuration for OAuth/SSO Providers
7 votes · 0 comments
Add System Services to Sandbox SDK
1 vote · 0 comments
No comments yet.