Guidance to Single Sign On (SSO)

[dotnetshadow]

Hi there,

Firstly I want to say great work on such an awesome project. Well done!

Please note when trying to access a similar discussion here, an an errors:
#1367

There is a common request that many people ask throughout the issues / discussions about how to use an existing userbase with remark 42 i.e. single sign on. I appreciate that the primary authorization is social, but having this feature would make using remark42 so much more powerful. It would be great if the docs could include ways to achieve this (even if remark doesn't directly support it).

Previous Issue: #752

• Not sure it fully works as there was something about being able to refresh tokens "...We need just add API for login event on the site and than remark iframe will be reloaded and remark could handle all of it by itself...." perhaps you could expand on this in a doc?

Previous Issue: #363 (comment)
"Extend your website login implementation to make remark42 jwt directly and set it as a cookie."

• It's a pretty old thread now, but is this still viable? Can this be done without editing remark42 code? Any better way to do this?
• Maybe provide an example say using php etc that demonstrates the general idea is to have a user from example.com be able to write a comment that's hosted on remark42.example.com without having to login or type a username. I think other commenting systems provide a key that can be used to hash etc and provide single sign on.

Questions

1. Is there any API that will login a user on remark42 (not the anonymous one), that will facilitate such a common request?
2. Is there any solution that will allow a existing user to be logged in without having to modify remark42?
3. Will we ever see support for SSO or is it outside the scope of this project?
4. If SSO won't be supported, can documentation be updated for possible work arounds?

Thanks for your time and efforts, your thoughts are greatly appreciated