Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

FedCM prototype #795

Merged
merged 25 commits into from
Jul 15, 2024
Merged

FedCM prototype #795

merged 25 commits into from
Jul 15, 2024

Conversation

darthmaim
Copy link
Member

@darthmaim darthmaim commented Apr 26, 2024 •
edited
Loading

TODO

  • Implement assert endpoint
  • Verify that the request contains a Sec-Fetch-Dest: webidentity HTTP header
  • Allow applications to set a privacy policy and terms of service URLs
  • Login API
  • Allow applications to register domains for FedCM -> Verify domain matches a registered redirect url
  • Add helper to client
  • Write docs
  • Test

@darthmaim
Add FedCM client-metadata endpoint
581630b
@darthmaim
Use absolute icon path
45ac5be
@darthmaim
Add Access-Control-Allow-Credentials to CORS headers
45dc991
@darthmaim
Update colors in FedCM config.json
f1a36ee
@darthmaim
Add FedCM assert endpoint (WIP)
bda014c
@darthmaim
Add FedCM login page
ec2aff7
@darthmaim
Block FedCM routes in robots.txt
eeaf991
@darthmaim
Add FedCM to example
e3ccd7b
@darthmaim
Set login status
d7ea129
@darthmaim
Allow applications to set privacy policy and terms of service URLs
1d34d31
@darthmaim
Add privacy policy and terms of service to authorize page
10aab6a
@darthmaim
Add FedCM to @gw2me/client package
bac303c
@darthmaim
Implement FedCM assert endpoint
55608b0
@darthmaim
Update fed-cm icons
7fefa52
@darthmaim
Add initial FedCM documentation
56712b7
@darthmaim
Add experimental warning to FedCM docs
c3bd732
@darthmaim
Set approved_clients in FedCM accounts endpoint
eb1d882
@darthmaim
Add support for button mode in client library FedCM request function
b8d7754
@darthmaim
Verify origin matches a registered callback url in FedCM assert endpoint
b5a52c7
@darthmaim
verify Sec-Fetch-Dest: webidentity header is set for FedCM endpoints
6a6342d
@darthmaim
Only allow additional scopes in FedCM assert if disclosure was shown
80b0516
@darthmaim
Only return approved_clients for FedCM accounts that have all FedCM s…
22fb925 
…copes
@darthmaim
Add FedCM button mode to example app
235e2cc
@darthmaim darthmaim marked this pull request as ready for review July 15, 2024 11:31
@github-actions GitHub Actions
Copy link

Publish / npm / client
Merging this PR will publish the npm package @gw2me/[email protected]

@darthmaim darthmaim added this pull request to the merge queue Jul 15, 2024
Merged via the queue into main with commit cd5bce3 Jul 15, 2024
14 checks passed
@darthmaim darthmaim deleted the feature/fed-cm branch July 15, 2024 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@darthmaim