Automatic Login from iOS/Android app

[sam (Sam Saffron)]

This is super timely

See:

User API keys specification

Discourse contains a system for generating API keys per user if a very specific protocol is followed. This feature facilitates “application” access to Discourse instances without needing to involve moderators. High level description At a high level: Client (desktop app, browser plugin, mobile app) generates a private/public key pair and return url Client redirects to a route on discourse giving discourse its public key Discourse gets approval from user to use app Discourse genera…

Working on it this week.

Basically after we generate an API key we redirect to a universal link that your app can open.

Definately do not ship API keys in the app, you are 1 jailbreak away from hackers doing whatever they want to your website.