4 ms·
You're probably already logged in on the main Github.com domain. You were redirected from the community domain to the main domain to log in. Once there, the sy
by breakingcups 9y ago
You're probably already logged in on the main Github.com domain.
You were redirected from the community domain to the main domain to log in. Once there, the system saw you were already logged in and redirected you back to the community site with some proper tokens in the url to identify you.
- oneeyedpigeon 9y agoBut they're different domains; how are they identifying me as a client?
- kroltan 9y agogithub.community isn't. It sends you to github.com regardless, since their login is there. github.com sees you're already logged in, and redirects back, passing auth.
- chrismorgan 9y agoThat suggests it’s bypassing OAuth—with OAuth you’d get a “GitHub Community wants access to X, Y and Z” interstitial.
- Crespyl 9y agoUnless it's by the same authors as GitHub, and has access to the same OAuth client id/secrets as the master GitHub app.
- jon-wood 9y agoMost OAuth providers have a flag for first party clients which allows them to bypass the usual authorization dance and just bounce you straight back to the origin.