If so is there a workaround ?
# talk-kratos
m
If so is there a workaround ?
m
Yes, there are ways you can work around it. It depends on your exact setup what can work there. What I saw several times before it to use Ory Hydra as your own OAuth2.0 /OIDC provider. You can dig around on github discussions and in the slack a bit and see if you find something. If you come up short let me know and I will join the hunt, as the question comes up every once in a while. But tl;dr: you can workaround but it is not trivial
👍 1
s
easiest will probably be to open a browser for that and do the OIDC login there
m
@steep-lamp-91158 That is the first approach we considered but we really need login through Facebook. I think it's planned to be not supported after October 5th.
s
facebook is special anyways 'cause they force you to ship your app with their spyware called "SDK", which we cannot ship as part of our open source software so facebook support will probably take even longer until we figure that one out
😅 3
m
Looking at the issues it seems the flow being considered for oidc support in
/api
is to use the id_token and swap that for a Kratos session token. That would generally work for most providers right?