confusion: xauth or oauth or my own auth? -
- i'm logged in a.com
- now i'm on b.com
- b.com accesses localstorage , sees i'm logged in a.com
- and asks me if want download pictures a.com
1- if don't want b.com know have accounts on local storage?
2- if a.com specifies sites can see token how hell a.com supposed know, sites users go to?
3- prevents b.com not authorizing without asking me (it has access whatever token stored a.com), if token weak one, - what's use of except letting b.com know i'm logged a.com? - if no authorization can occur token how can xauth can compared oauth. because oauth have go a.com , specify want b.com access photos , post wall can not send me emails. , when interaction occur xauth?
4- think oauth , xauth crappy interim solutions replaced totally new or think o/xauth 10.0 solution connected web?
5- suggestion a.com give access b.com - invest time , o/xauth, or write function produces 2 tokens , done it?
thanks.
ps: i'd appreciate answers people have implemented 1 or both of these solutions.
Comments
Post a Comment