Single Sign On (SS)

LOKE mobile (Tidy) can be configured to load external web pages inside a webview. These web pages allow for most javascript APIs, however are always accessed as an anonymous user. As such if the web page requires authentication a Tidy user will need to log in or register on the webview, even if they are logged in to the app.

To avoid this "double authentication" we allow for 2 options for SSO.

1. Using a session initialisation webhook.
2. Passing data via public key encryption.