unity3d - Xbox Live sign-in running Unity to authenticate Azure App Services / Mobile services -
i've got unity xbox live services example , running allowing me sign-in microsoft account via xbox live services in unity.
i've got azure app services (mobile services) running in unity query , persist data. app services supports authentication out of box including microsoft account support.
does know if can use authentication xbox live services sign-in authentication web calls against microsoft account in app services?
it gets complicated :) although can understand frustration. let me give quick overview, i'm happy give more details needed.
when dealing sign-in, first step authentication - , there 3 choices on such systems microsoft 1. msa, or microsoft account, consumer systems use, such xbox. 2. aad, or azure active directory, typically enterprise applications. 3. s2s, or server server, typically done either ssl certificate or shared secret. (note similar app secret mentioned above, although app secret less secure since secret app itself, , msa go together).
these 3 systems different in goals, designs , requirements there isn't option unify them.
now lets assume using #1 above - signing in msa. might wonder why can't take token returned 1 set of services , use another. realm of user privacy , security isolation. have noticed when sign game on pc xboxlive dialog box asking if okay? consent dialog , required malicious apps can't steal token 1 part of system (say outlook.com sign-in) , use grab data elsewhere (onedrive, xbox, etc) without user saying "yes, okay". same thing happens systems facebook, etc - standard system.
so, enable this, each time ask msa token, have specify site going use with, msa knows consent ask - , ensure stays site.
tl;dr - doing security right means more hassles :) news underlying system should able detect these , prevent user having present sign-in each site - 1 sign-in, possibly multiple consent dialogs. , more code developer...
Comments
Post a Comment