DEV Community

Discussion on: Implementing manual OAuth sign-in flow for Facebook and Google

Collapse
 
dbanisimov profile image
Denis Anisimov

So for anyone interested I've implemented the manual OAuth flows for both Google and Facebook (look for the links at the end of the original post)

It solved both third-party cookies issue and blocked SDKs issue. The sign-in flow with redirects works perfectly in Private mode with enhanced privacy protection. So far I haven't seen any problems on desktop or mobile.

Good news is that both FB and Google can return short-lived access tokens that can be directly fed to serverless auth providers, like Firebase, so there is no need to implement your own code-token exchange.

As an extra benefit abandoning FB sdk saves same bandwidth on page load.