So far HybridAuth looks like an easy to use abstraction layer for all the services one would want to use, which bodes well for the future.
I’ve been mulling through a few solutions to the biggest problem, multiple domain names.
Idea 1: Open a popup window with our generic domain, and via that window handle the authentication session for the requested service. Once authentication is complete and we are back at the callback page, “hijack” that session via PHP and move the users data over to the client’s domain.
If it was assumed that we would only ever being doing authentication, and no other social interactivity (especially via facebook), this would be a reasonable solution, but that is an unreasonable assumption. Although this would be the easiest, this could not work for us.
Idea 2: Develop the functionality to work for a specific domain and then try a second domain…
View original post 215 more words