These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Technology Lab

 
  • Topic is locked indefinitely.
 

Trusted Site Login
Author
Previous Topic Next Topic
Zulkir Szass Tam
Doomheim
#1 - 2016-02-11 16:26:41 UTC
I'm looking for info to read on how trusted sites can log into EvE (in game browser).

We use miniOrange OAuth with WordPress to log in with our EvE Account. It uses the actual EvE login, but to my surprise (in game) it did not automatically log me in, with or without trust.

I assume something else must be done to so do, and I'm hoping to convince the folks at miniOrange to possible add it.

Thanks for any pointers.
Yogi Berimor
Monkey Attack Squad
Goonswarm Federation
#2 - 2016-02-11 21:28:15 UTC
If i understand you correctly and you want to automatically log in into your website via ingame browser then it is a very bad idea from security perspective.

The main problem is that everything that ingame browser sends to some abstract trusted website is just a bunch of HTTP headers which means all this info can be easily faked by someone else. That's why you don't want to rely on such info.

And AFAIK ingame browser does not persists cookies between your game sessions.

So TL;DR; this is bad idea, dont use IGB for any autologin stuff.
Zulkir Szass Tam
Doomheim
#3 - 2016-02-25 13:58:33 UTC
Thank you Yogi, was not aware how it was handled.

Appreciate the information!