如何将站点用户登录到另一个站点

Question

I have a website and my users log in to my site. For each user, I store their credentials to another third-party site. I would like to be able to log the user in to the third-party site from within my site (preferable) or in a new tab (less preferable).

The problem is that the third-party site uses the X-FRAME-OPTIONS: SAMEORIGIN header. Is there any way I can achieve this if I have my users' credentials for the third-party site?

Answer 1

As already mentioned in the comments what you are looking for is Single Sign On (SSO)

Single Sign On (SSO) occurs when a user logs in to one application and is then signed in to other applications automatically, regardless of the platform, technology, or domain the user is using.

Source: https://auth0.com/docs/sso/current

Security Note

For security reasons you should not try to roll your own solution. See all the data breaches that happen every day and the heavy GDPR fines for who fails to protect user data. Plus Broken Authentication is in the OWASP top 10-2017