umputun/remark42

UI changes for GDPR

Ouverte

#54 ouverte le 26 mai 2018

 (0 commentaire) (3 réactions) (0 personne assignée)Go (432 forks)user submission
discussionenhancementfrontendhelp wanted

Métriques du dépôt

Stars
 (5 500 étoiles)
Métriques de merge PR
 (Merge moyen 87j 10h) (18 PRs mergées en 30 j)

Description

related to #47

I think we should add a popup/dialog after the user clicks on github/fb/goolge login links. This popup will ask for confirmation and will inform about cookies and will explain what info will be sent for such login.

Probably we should say:

 This service uses cookies.

 We use authentication cookies to identify the user once he has logged in. 
 
<show/hide detail>
|cookie name | description | duration| technical details|
|JWT | Signed web token identifying user| 1year| see https://tools.ietf.org/html/rfc7519|
|XSRF_TOKEN|Random ID preventing Cross-Site Request Forgery| 1year| see https://en.wikipedia.org/wiki/Cross-site_request_forgery|  

TBD: some text explaining what we send to oauth2 provider and what info we get back

if anyone has a good example what this dialog should be, pls share.

Guide contributeur