Hi 🙂
New to Supertokens (but extensively used to ...
# support-questions-legacyc
Chimanos
03/16/2023, 3:31 PMHi 🙂
New to Supertokens (but extensively used to Auth0); I'm trying to implement a "universal-login"-like solution with Supertokens.
Is there something straightforward ?
My idea was launching a core, a node backend and a frontend dedicated for this (on a separate domain, say identify.example.com).
I'm afraid of the interactions with the actual end application, which will rely on another domain.
Any thoughts / references ?
r
rp_st
03/16/2023, 3:39 PMhey @Chimanos
rp_st
03/16/2023, 3:40 PMif the actual end app is not on the same based domain (not a sub domain) of the SSO domain, then it would require supertokens to be an oauth provider. You can use us to build the implicit oauth flow (which i know is deprecated), right now, but if you want the authorisation code grant flow, then you will have to wait for us to release the oauth feature.
If it's across sub domains, you can share session cookies across sub domains and it would work.
c
Chimanos
03/16/2023, 3:42 PMHey @rp_st . Thanks for clear answer.
I had not realized Supertokens was not Oauth-compliant
r
rp_st
03/16/2023, 3:42 PMwe are an oauth client, but not yet an oauth provider.
rp_st
03/16/2023, 3:43 PMbut we are working on it at the moment - should be out in a 1-2 months time. Also note, that it will most likely be a paid feature, even for self hosted.
c
Chimanos
03/16/2023, 4:24 PMGood to hear 🙂
Might not be a breeze for you though, I mean coming from a "PnP" logic with SDKs, middlewares etc; and going to a "flow-centric" logic
r
rp_st
03/16/2023, 4:31 PMWell, we have figured out most of it from an architecture point of view - it's just the actual implementation + testing time.
5 Views