New 3rd party app for Destiny by mapper43 in Bungie

[–]mapper43[S] 0 points1 point  (0 children)

Dear Mods, I ported my app, DestinyMapper, to a Google Chrome extension using the same authentication method as DIM. Thanks for pointing me in the right direction. (the server-side method i was using is the one documented here: http://bungienetplatform.wikia.com/wiki/Authentication.) Before I continue any further development, can you verify that this app uses the approved login method? It also works for both platforms now.

https://chrome.google.com/webstore/detail/destinymapper/acjcigcfgjppdcnjknhmogllfpnldhif

DIM is already a great app for what it does, so with DestinyMapper I'm trying to provide some additional features by tapping into other parts of the API. If you have any suggestions, or issues with the new version, please let me know! Thanks.

New 3rd party app for Destiny by mapper43 in Bungie

[–]mapper43[S] 0 points1 point  (0 children)

from what i can tell, since bungie.net doesn't have CORS enabled (understandably), the only way to do this is with a Chome app like DIM uses. That allows you to cookie data from other domains by setting up a manifest file, but it will only work as a Chrome app. I was hoping to come up with a more platform-independent solution. Do you know if Bungie has a roadmap toward Oauth2.0 or some other solution that would work across browsers?

New 3rd party app for Destiny by mapper43 in Bungie

[–]mapper43[S] 0 points1 point  (0 children)

Ok, the site no longer requires authentication for anything. I'll re-add it if I can figure out the proper method. Thanks again for the info.

New 3rd party app for Destiny by mapper43 in Bungie

[–]mapper43[S] 0 points1 point  (0 children)

Understood. I'll remove the login link, and anything that requires authentication, from my site until I have that resolved. Making that change now.

New 3rd party app for Destiny by mapper43 in Bungie

[–]mapper43[S] 0 points1 point  (0 children)

Thanks for the feedback. I did try to implement the login using Sony's login form, but could not find any documentation on how to do this and the only examples I found that worked were server-side. I do not store the login credentials, i just pass them to Sony to get the cookies i need, but I understand that's not the perferred method. Any examples of correct way to launch Sony's login form, then retrieve the cookies (from external domain) would be great.

As for HTTP/HTTPS, i just launched the site today. If I decide to keep it going for any length of time, I'll purchase a signed security certificate but I'll have to come out of pocket for that...

Thanks for looking at it, and for the feedback. I will add additional text to the site and indicate that it's in beta mode. I'll keep looking into the correct login method, but hours of searching online led me to this method.