TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Django-SocialAuth - Login via twitter, facebook, google, etc. from single app

53 点作者 naish超过 15 年前

7 条评论

Steve0超过 15 年前
While this is certainly handy. I forsee lot's of problems for users typing their gmail password to autenthicate for other sites. Phishing has been around for a long time, and by using these authentication mechanisms it will only get easier.<p>For users it's not clear which site is legit.<p>This is legit: hxxps://www.google.com/accounts/ServiceLogin?service=lso&#38;domain=Socialauth.uswaretech.net&#38;anonSign=1&#38;continue=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fud%3Fst%3DBDKB7DbZLrOEjmE3c2kS<p>This is not: hxxps://www.google.com.evilsite.com/accounts/ServiceLogin?service=lso&#38;domain=Socialauth.uswaretech.net&#38;anonSign=1&#38;continue=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fud%3Fst%3DBDKB7DbZLrOEjmE3c2kS<p>For the avarage user, logging in means, click on the bookmark, see if a loginform pops up, log in. Now it's go to random site, get asked for your gmail password, and type it or else 'no cookie for you'.<p>That being said, I have no solution for the problem.
评论 #789105 未加载
评论 #789111 未加载
评论 #790431 未加载
评论 #789134 未加载
评论 #789099 未加载
jessep超过 15 年前
That's pretty sweet! The demo worked well for me on everything but Facebook, where it reloaded the page within the facebook popup, a littttle odd. This is a great start, though, for developing services that integrate with the API's of these services. Psyched to try it integrating it into an app.
评论 #789191 未加载
yish超过 15 年前
One challenge I have with all these logins options is that it becomes hard to remember which provider you logged in with. We have an issue already with Facebook connect and standard Django auth of duplicate accounts for a single user being created. Often times merging these can be rough. Has anyone come up with an elegant solution to this problem?
endlessvoid94超过 15 年前
How integrated is this to Django? Would it be easy to adapt to other framework (I'm thinking of Pylons). I'm working on a little website and would love to add this functionality without switching to Django.
评论 #790621 未加载
messel超过 15 年前
Wow I was looking for precisely this demo. Rockin'
评论 #789923 未加载
coconutrandom超过 15 年前
can you still login with django.contrib.auth?
评论 #789708 未加载
kentf超过 15 年前
Let's start working on one for Rails
评论 #789481 未加载