On Fri, 2018-06-22 at 14:31 +0300, Robert Munteanu wrote: > On Fri, 2018-06-22 at 15:38 +0530, Hasini Witharana wrote: > > Hi Robert, > > > > 1. User access Apache Sling login page > > > > > > - the login page contains a link to an external OAuth provider > > > (Google) > > > > > > > We need to have a cookie on this point. When a user click the link > > a > > request is send to Google. This request contains a variable called > > state. I > > need to store this variable on a HashMap against the cookie value. > > > Then you can use the API I suggested to add a cookie. The value can > be > a UUID to make sure it's (practically) unique. > > In which step will that cookie's value be used?
Based on the diagram from [1] I can now see where it is used. The follow-up questions is what are you using it for? Thanks, Robert [1]: https://cwiki.apache.org/confluence/display/SLING/OIDC+Flow
