I’m unclear on how the login flow is supposed to work with OpenID, OSSv2 and EOS and was hoping for some clarification.
My understanding of the intended flow is:
- On startup, the client requests to autologin
- Under the hood, using the AuthOSSAdapater, the client authenticates with our proprietary Identity Provider
- After that succeeds, through the AuthOSSAdapter, the client calls “GetLinkedAccountAuthToken”.
- The proprietary Identity provider implements this and retrieves a JWT Token?
- The JWT Token is used to create an ExternalAuthToken, which is then passed back to AuthOSSAdapater, which then uses it as part of the EOS connect login?
- On the EOS developer portal, we add the Identity Provider OpenID with a corresponding URL to verify that the token is correct
- If the token is correct, EOS responds with the login status
Is that correct?
As a further question, are we supposed to parse something out of the JWT Token or pass it back in its entirety?
[Attachment Removed]