I am trying to enable social Login on Web and on Mobile, My web can be configured to login on HostApp (Google, Microsoft , Twitter) However I want to configure (both web and mobile) to external login (google, AppleId , Facebook)
My main concern is the mobile, I did some research I found that the mobile can easily configured to do the login from its own side, but it will only return token that contains the email info, My mobile app can send this user token to server and ask server to login the user and generate bearer token (and refresh token) for that specific user, I am not sure that this is the right approach,
My Mobile app is flutter, and configured external login using firebase - this is what I figured out, please support me with:
- Is my approach correct?
- Do you suggest better approach?
- How to unify the login process on mobile and web? , I do not want the user on mobile to open browser and login there and redirects back to app (front channel),
- Do you have any resources for this topic
3 Answer(s)
-
0
Hi,
You can use code flow to login.
I do not want the user on mobile to open browser and login there and redirects back to app (front channel),
Unfortunately, this is necessary.
You can see that any mobile app that uses external login is always redirected to the browser.
-
0
Yes, I know the oAuth flow by default in general,
But I am trying to have better user experience for users based on modern login currently known on mobile apps,
I thought I can login on mobile through external login (google or apple id or SMS OTP) and then send related tokens to backend where the abp custom controller will validate the token then (login or register) and generate a new token for that user.
same like I can have the similar experience on angular where I can customize the account module so the experience will be the same
Please let me know what are the drawback of this solution, and is it doable on ABP ?
-
0
Hi,
Yes, it's possible.
same like I can have the similar experience on angular where I can customize the account module so the experience will be the same Please let me know what are the drawback of this solution, and is it doable on ABP ?
You can implement it using a similar way; as far as I know, external login requires a callback to the server to ensure security.It has no drawbacks if you implement it correctly.
