It has nothing to do with FedCM actually. In IndieAuth we avoid ... • Aaron Parecki

41°F

Emelia 👸🏻 https://hachyderm.io/@thisismissem • May 16
@aaronpk am I understanding that in order to use FedCM the RP must perform dynamic client registration with the IdP? I'm unsure of how the `client_id` comes to exist for the RP and not really getting it for the first-sign-in flow?

It has nothing to do with FedCM actually. In IndieAuth we avoid client registration entirely by using URLs as client identifiers. So the client already knows its client ID, and uses the same client ID at every authorization server it talks to. It's also a natural fit for FedCM since you can use `window.location.origin` for it in the JS call.

Portland, Oregon • 63°F

Thu, May 16, 2024 11:15am -07:00

1 reply
Have you written a response to this? Let me know the URL:
- Emelia 👸🏻 hachyderm.io/users/thisismissem
  
  @aaronpk hmm, okay, but somehow my server needs to know `client_id=https://app.example` right?
  
  Thu, May 16, 2024 11:25am -07:00

Posted in /replies using monocle.p3k.io