Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

One-button Solid login via the browser window #44

Open
RubenVerborgh opened this issue Jun 14, 2022 · 4 comments
Open

One-button Solid login via the browser window #44

RubenVerborgh opened this issue Jun 14, 2022 · 4 comments
Labels
challenge technical problem applied to a use case proposal: approved ✅

Comments

@RubenVerborgh
Copy link
Contributor

RubenVerborgh commented Jun 14, 2022

Pitch

My browser should have a series of buttons that I can press and depress to log in with different WebIDs. My browser remembers my credentials. By default, I'm logged in anonymously. When I press a button, the website gets a signal that I want to log in with this specific WebID (so the IDP selection step can be skipped).

image

Desired solution

  • A browser extension to which I can register multiple WebIDs
    • A series of buttons in my browser corresponding to those WebIDs (plus an anonymous user)
    • The extension exposes an object to the browser tab, such that apps can attach a listener.
  • An example app that reacts to clicks on these buttons.

Acceptance criteria

  • My browser displays buttons
  • I can log in by clicking those buttons
  • Preferably a cross-browser extension

Pointers

Scenarios

@RubenVerborgh
Copy link
Contributor Author

This is how Google does it (note that I am in Firefox here, so it is actually reddit.com that does it):

image

Of course in an iframe for security reasons:

image

Solid (being decentralized) does not have that single point of access that Google has, which is why we want the browser.

@pheyvaer
Copy link
Contributor

@RubenVerborgh Would it make sense to make an extra challenge that is easier and that is tackled before this one?

  • Only consider one WebID at the time.
  • Capture all requests from the browser and make them authenticated. The advantage here is that I can go to a protected Webpage without the need of an app to attach a listener.

@RubenVerborgh
Copy link
Contributor Author

RubenVerborgh commented Aug 23, 2022

@pheyvaer Agreed; could you take that up?
Key is to understand whether or not we can indeed authenticate requests from an extension.

@pheyvaer
Copy link
Contributor

Done at #67.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
challenge technical problem applied to a use case proposal: approved ✅
Projects
None yet
Development

No branches or pull requests

2 participants