blue-arm-79140
12/01/2021, 2:32 PM<http://game1.mydomain.com|game1.mydomain.com>
, <http://game2.mydomain.com|game2.mydomain.com>
, <http://game3.mydomain.com|game3.mydomain.com>
etc (there will be many and each of them will also have a mobile app store version)
⢠Usable also on the mobile app store versions that are the same as the browser apps but basically wrapped via frameworks such as Cordova
⢠Usable if the app was hosted by our third-party partners so the url might potentially be different e.g., <http://abc123.somepartner.com|abc123.somepartner.com>
Is using Kratos with Hydra the way to go to satisfy all these requirements or do I basically have to have a new deployment for each of the scenarios? We want to self-host as well which would be most likely via kubernetes deployments.
Am I right in thinking that I can use the browser-based flows via AJAX? Asking because from the docs, it was stated that API flows should not be used except for non-browser based apps but the flow diagram looks very similar between API and AJAX method.steep-lamp-91158
<http://mydomain.com|mydomain.com>
in a way that it would be accessible by all sub domains as well
and for third-party integrations you can use OIDC through Hydrablue-arm-79140
12/02/2021, 9:40 AMand for third-party integrations you can use OIDC through HydraDoes does this mean to login with our hosted Kratos deployment that is also used for the first-party domains through Hydra? Sorry if this is a stupid question but just wanted to get a clear picture as I dont usually get into the nitty gritty bits of auth so its something rather new to me.
API Flows
directly but even then Is there a way to whitelist certain apps by their id (e.g., com.something.app1 etc) on the same deployment configuration?User Registration
flow of Kratos via Hydra with some redirects as well if I am right.steep-lamp-91158
blue-arm-79140
12/02/2021, 12:14 PM