Skip to content

(DOCSP-12639): [realm-web] Update Google redirect deprecation note #526

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Oct 9, 2020

Conversation

nlarew
Copy link
Collaborator

@nlarew nlarew commented Oct 7, 2020

Pull Request Info

Issue JIRA link:

  • (DOCSP-12639): [realm-web] Update Google redirect deprecation note

Docs staging link (requires sign-in on MongoDB Corp SSO):

@nlarew nlarew merged commit 5414037 into mongodb:master Oct 9, 2020
@nlarew nlarew deleted the google-redirect branch October 9, 2020 16:05
Copy link
Member

@kraenhansen kraenhansen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@nlarew I'm sorry for being late to the party here, but I wanted to share some thoughts on this change.

Comment on lines +540 to +541
then redirects to URL that you provide, which allows you to get an access
token and finish logging the user in.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Technically this is an "auth code" and not an access token and technically it's not the "user" that gets the code, but the SDK - since they don't need to handle it manually (other than calling Realm.handleAuthRedirect()).

process faces limitations when authenticating :ref:`Google
<google-authentication>` users. If you use the Google login redirect flow
using Realm's redirect flow, a maximum of 100 Google users may authenticate
while the app is in development/testing/staging and all users will see an
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"while the app is in development/testing/staging" => "while the app's consent screen isn't verified"

<google-authentication>` users. If you use the Google login redirect flow
using Realm's redirect flow, a maximum of 100 Google users may authenticate
while the app is in development/testing/staging and all users will see an
unverified application notification before they authenticate.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps add "these are limitations imposed by Google".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants