: Requiring authorisation on multiple devices In creating a sort of "remote control" site, I'm wondering what the best way for authorisation is going to be. The simplest example would be: User

@Megan663

If you implement Oauth, you can't use authorization tokens twice.

The correct way to implement it would be to have the person log in using Oauth from each device. Each time they log in they would get a different set of authorization tokens. Then the Oauth server would give you a user id that you can store in your database to link the two device sessions together. That Id would be the same both times.

Here is how Oauth login might work using Facebook:


Create an "app" on Facebook which will give you a client id and client secret: developers.facebook.com/ Redirect the user to this url: www.facebook.com/dialog/oauth?client_id=MY_CLIENT_ID_FROM_FB&response_type=code&state=RANDOM_STRING_GENERATED_BY_ME&scope=public_profile,email&redirect_uri=http://mysite.example.com/login.php Facebook verifies the user and redirects them to: mysite.example.com/login.php?code=RANDOM_STRING_GENERATED_BY_FACEBOOK Your server requests this URL from Facebook: graph.facebook.com/oauth/access_token?code=RANDOM_STRING_GENERATED_BY_FACEBOOK&client_id=MY_CLIENT_ID_FROM_FB&client_secret=MY_CLIENT_SECRET_FROM_FB&redirect_uri=http://mysite.example.com/login.php&grant_type=authorization_code Facebook will send a response in name value format that contains an access_token and a state which you should verify is the same random string that you sent earlier.
Your server requests this URL from Facebook: graph.facebook.com/me?access_token=ACCESS_TOKEN_FROM_FB Facebook will send a response encoded in JSON that contains information about the user including their email address and their facebook id.


When the user logs in from on a device, these steps need to be performed for that login. Then you have a Facebook id with which you can link the device sessions.

You could choose a different Oauth provider and the steps would be similar.

Vote Up Vote Down