All geek questions in one place

Is it possible to authenticate using OAuth without asking a user when we have user credentials?

Case:
The desktop client interacts with server A.
Server A, as a result, must connect to server B.
The client receives an oauth request.
Now the client already has user credentials for server B. Is there a way to authenticate to server B without asking the user or displaying any user interface? We must do this in a general way, since we do not know what server B is.

My real understanding is that it is not. Even if we somehow process the login form, there will still be an OAuth confirmation that the user will have to click.

I just want to confirm that my current understanding is accurate. Let me know if you have any ideas.

+3
source share
2 answers

The client was sent to the login page on server B through an HTTP redirect. Since you do not know anything about server B, you do not know what authorization (and / or authentication) is; it goes beyond OAuth. You do not know that you have user credentials for gap B, because you do not know what they are.

, B / , ( cookie), . ; B . , OpenID, , , , .

, . B, .

+1

.

B A, B (, LinkedIn, Twitter ..). B, IMO B .

, 2 B, C A.

A =>C (Access)  
A !=>B (no access)  
C =>B (access)

C, B, A, C.

+1

Source: https://habr.com/ru/post/1717269/

More articles:


All Articles