core icon indicating copy to clipboard operation
core copied to clipboard

social authentication security

Open goto-bus-stop opened this issue 5 years ago • 0 comments

We need a config option like allowedOrigin: ['https://wlk.yt/'] for use in the social signup feature, to prevent sending semi-private data (only the avatar in this case) to unknown clients.

Originally posted by @goto-bus-stop in https://github.com/u-wave/core/pull/265#issuecomment-622385432

goto-bus-stop avatar Jun 23 '20 12:06 goto-bus-stop