discussionenhancementfrontendhelp wanted
仓库指标
- 星标
- (5,500 个星标)
- PR 合并指标
- (平均合并 87天 10小时) (30 天内合并 18 个 PR)
描述
related to #47
I think we should add a popup/dialog after the user clicks on github/fb/goolge login links. This popup will ask for confirmation and will inform about cookies and will explain what info will be sent for such login.
Probably we should say:
This service uses cookies.
We use authentication cookies to identify the user once he has logged in.
<show/hide detail>
|cookie name | description | duration| technical details|
|JWT | Signed web token identifying user| 1year| see https://tools.ietf.org/html/rfc7519|
|XSRF_TOKEN|Random ID preventing Cross-Site Request Forgery| 1year| see https://en.wikipedia.org/wiki/Cross-site_request_forgery|
TBD: some text explaining what we send to oauth2 provider and what info we get back
if anyone has a good example what this dialog should be, pls share.