668
edits
m (→Authentication) |
|||
| Line 44: | Line 44: | ||
** a "need-to-login" message. | ** a "need-to-login" message. | ||
* When WMF receives a "need-to-login" message from the WebMod, it opens up a pop-up to the WebMod's preferred login URL. | * When WMF receives a "need-to-login" message from the WebMod, it opens up a pop-up to the WebMod's preferred login URL. | ||
* The WebMod is then responsible for authenticating the user however it sees fit, likely by prompting, within the dialog, for username and password. | |||
* Once a user has successfully logged in, the WebMod messages WMF back with an optional opaque ''credentials'' JavaScript object, which WMF stores securely. The use of ''credentials'' helps when a user wants to invoke the WebMod with different identities, e.g. two Twitter identities. | |||
* WMF then messages the WebMod IFRAME with a ''login()'' call including the ''credentials'' object it received and stored. The WebMod should, at this point, respond with an ''ok'' message including user identity details (display name, username, potentially a profile photo URL, ..) | |||
=== F1-Specific Features === | === F1-Specific Features === | ||
edits