umputun/remark42

UI changes for GDPR

Aberta

#54 aberto em 26 de mai. de 2018

 (0 comentário) (3 reações) (0 responsável)Go (432 forks)user submission
discussionenhancementfrontendhelp wanted

Métricas do repositório

Stars
 (5.500 estrelas)
Métricas de merge de PR
 (Mesclagem média 87d 10h) (18 fundiu PRs em 30d)

Description

related to #47

I think we should add a popup/dialog after the user clicks on github/fb/goolge login links. This popup will ask for confirmation and will inform about cookies and will explain what info will be sent for such login.

Probably we should say:

 This service uses cookies.

 We use authentication cookies to identify the user once he has logged in. 
 
<show/hide detail>
|cookie name | description | duration| technical details|
|JWT | Signed web token identifying user| 1year| see https://tools.ietf.org/html/rfc7519|
|XSRF_TOKEN|Random ID preventing Cross-Site Request Forgery| 1year| see https://en.wikipedia.org/wiki/Cross-site_request_forgery|  

TBD: some text explaining what we send to oauth2 provider and what info we get back

if anyone has a good example what this dialog should be, pls share.

Guia do colaborador