[Openid-specs-native-apps] Web Browser news from WWDC

[David Waite]

You might have multiple redirect_uris if you have sections of your website which are not represented by your app but which need authentication.

Website initiated -> website-only redirect uri (uri not claimed by the app)
App initiated -> app-only redirect uri (gives an error if you hit it with a browser)

For other cases (no auth functionality on site, complete overlap between website and app) you would only need a single redirect uri.

-DW

> On Jun 15, 2015, at 5:02 PM, John Bradley <ve7jtb at ve7jtb.com> wrote:
> 
> 
> The callback/claimed URI is a separate feature from the browser tab.   It would be generic to the browser.  Letting apps claim links that would otherwise go to a web server.
> 
> So a linked in link in a email would open the native app rather than the web page.
> 
> We don’t have much info on how they would work together.
> 
> 
> Assuming the call to a token agent, and the call to the web site is the same then a AS could just insert a token agent by having the user install a app.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-native-apps/attachments/20150615/dca3d79e/attachment.html>