How does SSO work on Tostra/Habré?

Question

Single sign-on technology

How does TM ID authentication work?
I looked towards SAML / CAS, they are based on a redirect, how can I avoid it and make SSO on Ajax requests?
There is a similar implementation on Yandex

Answer 1

It works exactly like everywhere else, there are no ajax requests.
Everything about oauth is made normal.
toster -> tmid -> github -> tmid -> toster
You can partially avoid changing the page, but then a new tab will open anyway with a bunch of redirects.
To do this, write down the implementation of authorization using postMessage, more precisely, the communication of the window in which the authorization takes place with the main window is the original one.
Here is a complete example
https://github.com/cretueusebiu/laravel-nuxt
https://github.com/cretueusebiu/laravel-nuxt/blob/...