Comments (4)
I've recently added google SSO to Findka. I haven't moved any of that code into Biff, but I will at some point. If anyone wants to use google SSO now/soon, I can prioritize that (or at least post some code samples--it wasn't very complicated).
My implementation of google SSO is a little unorthodox. I don't use google's JWT for session management; I just use it once to verify that you control a given email address, and then I authenticate your (cookie-based) session for that address. This made development fast since Biff already manages the sessions for signin-via-email-link. I didn't want to overhaul Biff's logic for checking authentication. Eventually it'd be worth re-evaluating if using (encrypted, stateless) session cookies is a good approach or if we should switch to JWTs.
from biff.
Also it would be better if email link auth included a temporary code the user can enter in, in case you open the email on a different device from the one you're trying to log in with. That can also help users get around those (stupid, despicable) embedded web browsers that mobile apps are so fond of using.
from biff.
New version of Biff is a lot simpler, and I think just doing email link authentication in the starter project makes sense. The authentication code is very easy to change (it's all contained in the template code). If anyone wants passwords/sso they can implement it themselves and blog about it, then we could link to the blog post from the biff docs.
from biff.
Also it would be better if email link auth included a temporary code the user can enter in, in case you open the email on a different device from the one you're trying to log in with. That can also help users get around those (stupid, despicable) embedded web browsers that mobile apps are so fond of using.
this would still be nice. Notion's implementation makes a good reference. But for now I'll leave this closed until someone brings it up.
from biff.
Related Issues (20)
- Unable to create new project HOT 2
- Get started instructions not working? HOT 1
- `secret.env` values are inconsistent in dev/prod when using quotes HOT 10
- Add docs for fixing UnsatisfiedLinkError
- Update docs to use `bb` folder instead of `tasks` HOT 1
- Sometimes auth plugin blocks on signin HOT 1
- Sometimes the first bb deploy doesn't work without -f HOT 3
- (Website) Hero section is fixed on mobile and obstructs view when scrolling HOT 2
- Error while executing task: css HOT 3
- Signin via new email yields Sign-up-like email but doesn't create session
- How to use Biff with datomic? Any example? HOT 3
- [feature suggestion] biff libraries repository HOT 2
- [Docs] Broken links on Should you use Biff article HOT 1
- Can't start `bb dev` on a fresh install HOT 7
- Warn and log out user if deleted HOT 5
- Biff example site does not load: java.lang.ArithmeticException: long overflow HOT 2
- `install-tailwind` fetches the ARM binary on a x86 Mac HOT 2
- Is it possible to keep assets files in modules? HOT 1
- Document writing a test that roundtrips to xtdb? HOT 2
- Execution error (NullPointerException) at com.biffweb.tasks/dev (tasks.clj:290). HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from biff.