Live data from Hacker News

OAuth & One-Page Apps: Avoiding the Redirect

nicholasjacob.com

11–16 of 16 posts

Re: OAuth & One-Page Apps: Avoiding the Redirect

#12
I kinda sound like a grumpy old man, constantly complaining about the same stuff. But..

For the love of everything that's holy, stop adding these totally useless social media bars that are floating on top of your potentially interesting content. This entry is unreadable on the go, I'll probably forget to come back later today and the only thing I'll recall is that there was another "of those" useless submissions.

Re: OAuth & One-Page Apps: Avoiding the Redirect

#14

I kinda sound like a grumpy old man, constantly complaining about the same stuff. But.. For the love of everything that's holy, stop adding these totally useless social media bars that are floating on top of your potentially interesting content. This entry is unreadable on the go, I'll probably forget to come back later today and the only thing I'll recall is that there was another "of those" useless submissions.

Yes. Nicholas: this is what your site looks like in Android 4.0 http://twitpic.com/9q8c7c - in other words, unreadable.

Re: OAuth & One-Page Apps: Avoiding the Redirect

#15
post #6

We, Backup Box, are a one page app and we do OAuth without redirect all the time. In fact we have one script that handles all the OAuth processes and any new ones we need to create just pop in and there's no customization to be done. I open a new window (tab) with the OAuth process and since I opened the tab I can redirect to some quick closing script and my main code is waiting for the auth process to finish. Once i…

Presumably you have the auth flow in the new tab finish on a simple page containing a script. What does that script do to notify the original window that the auth flow is finished?

The redirect url from the oauth process (which basically every third party has) is simply a page of ours with close(); inside some javascript tags. Since we opened the window programatically we can close it.

In the front end I just poll every few seconds for the oauth completion and the server says "yup I'm done" or "they're still working on it" :)

Re: OAuth & One-Page Apps: Avoiding the Redirect

#16
post #8

Earlier quoted context omitted.

Presumably you have the auth flow in the new tab finish on a simple page containing a script. What does that script do to notify the original window that the auth flow is finished?

If you open the OAuth flow in a pop-up, with window.open (actually, for most browsers to open a pop-up, the user has to actually click on a link, so your href should be javascript:window.open(" https://oauth_start ) - target="_blank" might work as well but I can't remember), after the user has completed the authentication and ended back up on your site, you can trigger a function on the parent window and close the po…

You can actually trigger the close function from the window that has been opened. Since it was opened programmatically it can be closed programmatically.
Post reply on HN