{"push_id":898906318,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"13cf7711567d20750533826c3cb8728ff387360c","before":"1bb82e7279ffc3806639e0804fc5e33e52a6bc03","commits":[{"sha":"13cf7711567d20750533826c3cb8728ff387360c","author":{"email":"07c342be6e560e7f43842e2e21b774e61d85f047@lw.io","name":"Lawrence Wang"},"message":"fix third-party login\n\nthis is how OAuth works now:\n\n1) user clicks on a provider button in a browser\n2) a popup opens directly to e.g.\nhttp://www.hylo.com/noo/login/facebook?returnDomain=http://next.hylo.com\n3) returnDomain gets stored in the session\n4) when the OAuth provider redirects back to e.g.\nwww.hylo.com/noo/login/facebook/oauth:\n4a) the cookie returned from www.hylo.com is set to work across all\nsubdomains of hylo.com, so the newly logged-in session can also apply to\nnext.hylo.com\n4b) the value of returnDomain is retrieved from the session so that the\npopup can use opener.sendMessage and trigger the browser to continue\n\nas a consequence, the host for hylo-redux and hylo-node have to share a\nroot domain. for testing against the production hylo-node with a local\ndev instance of hylo-redux, i’ve created the localdev.hylo.com CNAME,\nwhich just points to 127.0.0.1.","distinct":true,"url":"https://api.github.com/repos/Hylozoic/hylo-redux/commits/13cf7711567d20750533826c3cb8728ff387360c"}]}