J
J
jeruthadam2019-08-08 20:25:19
JSON Web Token
jeruthadam, 2019-08-08 20:25:19

How to make a general authorization for a grid of sites?

There is a grid of 10 sites. It would be desirable to make transparent uniform authorization between them. Those. if a user is registered on one site, when he enters another site of this network, he is automatically registered. How to do it?
For example, now I'm trying to make an external authorization server. And now the authorization request goes not to mydomen.com/authbut to authserver.com. I'm trying to put a cookie - it is not set. How do other services get around this? How is it generally implemented?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
I
irishmann, 2019-08-08
@irishmann

Cross-Site Authorization

I
Ivan Shumov, 2019-08-08
@inoise

This is called Single Sign-on. It is implemented by introducing a separate authentication service that works according to one of the popular protocols: OAuth2, OpenId, SAML. There are ready-made solutions and services like Auth0, and there are those that are fashionable to deploy on your own: Keycloak, WSO2, Identity Server 4, ...
It is fashionable to write it yourself - it will be long, expensive, important

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question