mikkel/pvm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add social login providers (Google, Apple, Facebook) to TODO

Browse source 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Mikkel Georgsen 2026-02-08 12:57:19 +01:00
parent c0cb2d25a0
commit 76489a53a6
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
docs/TODO_SECURITY.md
View file

@ -14,6 +14,15 @@ When the cache expires, every concurrent request sees stale cache and calls `ref
**Fix:** Add a "refresh-in-progress" flag or use double-checked locking so only one request triggers the refresh while others wait. **Fix:** Add a "refresh-in-progress" flag or use double-checked locking so only one request triggers the refresh while others wait.
### Social login providers (Zitadel IDP configuration)
Configure external identity providers in Zitadel so users can sign in with social accounts. Each requires creating OAuth2 credentials with the respective provider and registering them in Zitadel Console → Settings → Identity Providers.
1. **Google** — Google Cloud Console OAuth 2.0 Client ID
2. **Apple** — Apple Developer Sign in with Apple service ID + key
3. **Facebook** — Meta for Developers app with Facebook Login product
No code changes needed in the SvelteKit app — Zitadel's login page shows social buttons automatically once IDPs are configured.
## Medium Priority ## Medium Priority
### `trustHost: true` in auth.ts ### `trustHost: true` in auth.ts