Ties a federated sign-in to the tab that started it, so that a link to the
callback page made from someone else's sign-in can't sign this browser in
to their account (login CSRF). FederatedSignIn keeps the sign-in's state
before leaving for the other instance, in sessionStorage, which outlives
the trip there and back in one tab, and FederationCallback finishes only
a sign-in whose state it finds.
f
forgetSignIn(): void
Forgets the sign-in this tab started, once it is being finished.
f
rememberSignIn(authorizeUrl: string): void
Keeps the state of the sign-in that authorizeUrl starts.
f
startedHere(state: string): boolean
Returns whether state is that of the sign-in this tab started.
Usage
import * as mod from "src/utils/auth/federation.ts";