https://bugs.gpodder.org/show_bug.cgi?id=1757
Bug ID: 1757
Summary: User Interaction free registration and login
Classification: Unclassified
Product: gpodder.net
Version: unspecified
Hardware: PC
OS: Linux
Status: UNCONFIRMED
Severity: feature request
Priority: low
Component: Advanced API (Server-side)
Assignee: [email protected]
Reporter: [email protected]
I'm developing a FLOSS podcast application for Android, and would like to
integrate gpodder support. I would also like not to bug the user about it since
most of them probably don't know/care about gpodder when they first open the
app.
I would therefore be nice with an API to register and authenticate users
without requiring any interaction from them.
The login process should be done by OAuth and is covered here:
https://bugs.gpodder.org/show_bug.cgi?id=1695
The registration is a bit more tricky - mostly because my OAuth flow is a bit
rusty. My terminology will probably also be a bit wrong :) It should however be
possible since the user in most cases already is authenticated to his/her
device.
It is easy to support one services one at the time. For instance - if you want
to support Android you just ask for the (g)mail during login, and sign the user
up if the provided e-mail is not in the database already during login. There is
no reason to verify this mail with an e-mail loop since the actual e-mail
address is provided (or signed, I don't remember the actual data flow) by
google directly: https://developers.google.com/accounts/docs/OAuth2
The same goes for facebook, twitter etc.
Most web framworks have plugins for social user integration, but I don't feel
it's in the spirit of a libre service as gpodder to require an account at a
social service in order to register. However, without a trusted third party
there is no way around an e-mail loop in order to prove the e-mail provided is
legit.
In case an app want to sign a user up from a device not authenticated to
Google/Facebook/etc (say an N900) it should just perform a 2 legged
authentication and provide an e-mail. Without a trusted third party the web
service needs to register the e-mail, send an verification mail and throw and
error telling the app the user need to verify the mail before he/she is able to
log in.
--
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
gPodder-Bugs mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/gpodder-bugs
