@@ -10,20 +10,20 @@ API proposed by [MSC1236](https://github.com/matrix-org/matrix-doc/issues/1236).
1010
1111## Proposal
1212
13- Room and account widgets may request new OpenID credentials from the user so they can log in/register with
13+ Room and account widgets may request new OpenID Connect credentials from the user so they can log in/register with
1414the backing integration manager or other application. This is largely based on the prior art available
1515[ here (element-web #7153 )] ( https://github.com/vector-im/element-web/issues/7153 ) . The rationale for such an
1616API is so that widgets can load things like a user's sticker packs or other information without having
1717to rely on secret strings. For example, a room could be used to let a user create custom sticker packs
1818via a common widget - it would be nice if that widget could auth the user without asking them to enter
1919their username and password into an iframe.
2020
21- Widgets can request OpenID credentials from the user by sending a ` fromWidget ` action of ` get_openid `
21+ Widgets can request OpenID Connect credentials from the user by sending a ` fromWidget ` action of ` get_openid `
2222to initiate the token exchange process. The client responds with an acknowledgement of
2323` {"state":"request"} ` (or ` {"state":"blocked"} ` if the client/user doesn't think the widget is safe).
2424The client then prompts the user if the widget should be allowed to get details about the user,
2525optionally providing a way for the user to always accept/deny the widget. If the user agrees, the
26- client sends a ` toWidget ` action of ` openid_credentials ` with ` data ` holding the raw OpenID credentials
26+ client sends a ` toWidget ` action of ` openid_credentials ` with ` data ` holding the raw OpenID Connect credentials
2727object returned from the homeserver, and a ` success: true ` parameter, similar to the following:
2828```
2929{
@@ -50,7 +50,7 @@ To lessen the number of requests, a client can also respond to the original `get
5050` state ` of ` "allowed" ` , ` success: true ` , and the OpenID Connect credentials object (just like in the ` data ` for
5151` openid_credentials ` ).
5252
53- The widget should not request OpenID credentials until after it has exchanged capabilities with the client,
53+ The widget should not request OpenID Connect credentials until after it has exchanged capabilities with the client,
5454however this is not required to wait for the capabiltiies exchange.
5555
5656The widget acknowledges the ` openid_credentials ` request with an empty response object.
0 commit comments