ios login process - without external links - google-identity-toolkit

When a user presses on the login button via google or facebook, in ios it transfers the user to a
link in safari where the user should complete the login process.
is there a way to complete the login process with google\facebook within the app,
and not send the user to a safari page?
My ios app was rejected saying the login process should be completed within the app and should not transfer the user to a webpage in safari.
is there a way to open the google/facebook login page in the app itself using gitkit?

I assume login from an external webpage in Safari meaning e.g. the default Facebook fallback option for when a user doesn't have Facebook app installed and/or Facebook account logged in, in the Settings app.
We had the same problem with Apple for one of our app. We sent them a response saying "This is how Facebook's iOS SDK works, here's the link to the Facebook iOS SDK documentation explicitly stating the Facebook uses Safari as a fallback option by doing a quick app switch".
Next day, app was approved. I think the reviewer wasn't familiar with the authentication technology, so I think it's worth mentioning to the reviewer, hopefully it's the same case for you.
To login to Facebook without extra UI, you'd need to expect the user to have Facebook logged in, in the Settings app. From our own experience, this wasn't favourable, a number of users had the actual Facebook app installed on their device but didn't know how to login and at the time, we only offered login via the Social Framework (Facebook/Twitter through the Settings App).

Related

Linkedin oAuth login failure with error "Your LinkedIn Network Will Be Back Soon"

[Here's a link to the screen recording of the issue.] (https://drive.google.com/file/d/1vebV3izUTfP1o7NyXUP9irPM_oc89phi/view?usp=sharing).
The problem is not, in general, with accessing or logging into LinkedIn. I'm working on an app that uses the LinkedIn OAuth client to allow users to add their LinkedIn accounts.
My app https://notionsocial.web.app/ redirects the user to https://www.linkedin.com/oauth/v2/authorization?response_type=code&client_id=77hkxxkjkqzq2n&redirect_uri=https://notionsocial.web.app/auth/callback/linkedin&state=state&scope=r_basicprofile%20w_member_social%20rw_organization_admin%20w_organization_social%20r_organization_social, It opens the LinkedIn authentication screen and was working fine a few days ago.
But now, when a user enters his credentials and clicks "sign in," it does not redirect to my website, with or without an error message. But show this page.
It is not related to my LinkedIn personal account; I have tried with different accounts and different browsers. Even a user of my app has encountered this issue on his computer
I have even tried other social scheduling websites and logged on to them using LinkedIn successfully.
But when I tried creating a new LinkedIn developer app and went to the access URL with the new client ID, the same issue occurred.

Embed YT Live chat on Wordpress letting users interact with it

I have successfully embedded a live streaming with corresponding chat into my Wordpress website.
I wish my website users are able to interact with the chat embedded, but also if a user log in to my website using #gmail address, the chat remains not activated showing "sign in to chat" message.
is there a way to allow site users, logged in with gmail credentials, to interact with the chat directly from my site? I noticed that this only works if you browse through Chrome with an account, but on other browsers it doesn't work.

What is this "Sign in to <sitename> using Google prompt called?

I've recently been seeing this all over the web these days:
Earlier we used to have sign in with Google, Facebook, Twitter, etc., buttons using OAuth and what not but this something new as this is very much aware of all the accounts that you are logged in with on Google in your browser and all you have to do is to just click the click on the one you want to use.
I am curious to know what is this called, What technologies does it use and how can I incorporate this into my own websites?
Google uses OAuth 2.0 only for third-party authentication using its accounts.
But the JS that is responsible for initiating this flow is improvised. It now detects the state of signin, and shows the list of accounts that are already logged-in or were logged-in at this device. The user selects one of the accounts, and from there the sign-in process is the same standard OAuth flow.
Reference:
https://developers.google.com/identity/sign-in/web/sign-in
https://developers.google.com/identity/sign-in/web/session-state

Auto login FB app users into my site

On my website, the user can log in through Facebook.
I have also created a Facebook canvas app which consists of a small part of my website.
Through the Facebook canvas app, the user can access certain features of the site regarding their site account.
It works great when the user accesses the FB app while already being logged into the site.
However, if the user accesses the FB app while NOT being logged into my site - how do I log them into my site through the app?
It would be ideal if I could somehow automatically log them into their account when accessing my site through the FB app.
If that isn't possible, I would like the user to be able to log into my site through the Facebook app.
However right now when I redirect to the oauth login I get the following error:
Refused to display
'https://www.facebook.com/dialog/oauth?response_type=code&client_id=…nLpHx7N5X--Q'
in a frame because it set 'X-Frame-Options' to 'DENY'.
Summary:
Can I auto-login to my site when accessing the site through Facebook canvas
If not, how can the user log into my site through the canvas app?
So basically your problem was just how to call the FB login dialog from within canvas. If you use the URL redirect version, then you have to call it in the top window instance – the login dialog can not be shown in any kind of (i)frame, for security reasons¹
top.location.href=… in JavaScript, or target="_top" for a simple link can achieve that.
¹ User needs to be able to verify via address bar that they are entering their credentials on facebook.com, to prevent phishing attacks.

Facebook Connect Server-Side GetLoginStatus using ASP.NET C#

I am currently using the Facebook Javascript SDK and the Facebook C# SDK (soley for retrieving user graph objects).
Everything so far is going great except for the following scenario:
User logs into Facebook
User opens a new browser window and visits my
site
Using the Javascript SDK, I can use the FB.getLoginStatus method to determine if they are connected or not (which they are in this scenario as I have previously authorized my site/app for the facebook login).
However, I need to be able to detect upon the homepage of my site loading for the first time, ideally server-side, if we are in this 'connected' state, and if so, render some different content to screen (logged in vs not logged in).
I can't currently see a server-side method in the Facebook C# SDK that enables me to do the equivalent of FB.getLoginStatus (clientside).
I should point out that any subsequent changes to the users loginstatus is handled via subscribing to the auth.authResponseChange event and all is working fine there, but its the first time page load when the user first hits the site that's the problem.
There isn't a way to do this on the server with any Facebook SDK. You must detect the user's status with the Facebook Javascript SDK. The reason for this is because this information is stored in cookies that are either only readable by facebook.com or that are on you domain, but were set by Facebook and should not be parsed by your app.
You can parse the cookies on your domain if you like, but it isn't recommended because Facebook considers those cookies to be an internal implementation detail and does not guarantee their contents. They could change at any time and break your app.

Resources