2 ms·
I was ranting about this the other day. The whole point of programming is to have as few steps as possible. While we're at it, can we also say forcing 2nd part
by dec0dedab0de 7y ago
I was ranting about this the other day. The whole point of programming is to have as few steps as possible.
While we're at it, can we also say forcing 2nd party apps to use Oauth is nonsense that doesn't help anyone do anything.
- ceejayoz 7y agoThe linked article explains why the second step is necessary.
- dec0dedab0de 7y agoIt also gives examples of much better ways to solve the same problem.
- ceejayoz 7y agoIt specifically calls the other options out as less suitable for SAML users or having other downsides. Option two: "This option prioritizes handling username/password login, and may work better with password managers, but requires some Javascript handling that could be fickle." Option three: "It simplifies the page, doesn't require a lookup of the domain, but could be clunky for the platform's SAML users." Twilio is clearly aware of the other ways of handling this.