diff --git a/developer_manual/client_apis/LoginFlow/index.rst b/developer_manual/client_apis/LoginFlow/index.rst index 5519b37ab..ab58132b1 100644 --- a/developer_manual/client_apis/LoginFlow/index.rst +++ b/developer_manual/client_apis/LoginFlow/index.rst @@ -20,11 +20,13 @@ The client will register an URL handler to catch urls of the :code:`nc` protocol credentials in the final stage. This should be a one time webview. Which means: + * There should be no cookies set when creating the webview * Passwords should not be stored * No state should be preserved after the webview has terminated To have a good user experince please consider the following things: + * set a proper :code:`ACCEPT_LANGUAGE` header * set a proper :code:`USER_AGENT` header