I agree, it would be great if that inbetween step was removed.

I'm hesitant to open the forum to my users because I'm sure most of them would be confused as to which option to use. And rightfully so.

@Tim
How other developer can submit patch for ProxyConnect plugin?
It's very useful, and many feature need to add, since it has many external app!

Hi Everybody,
Here is my change on ProxyConnect to bypass handshake form! Use it at your own risk!
Open file class.proxyauthenticator.php, insert this into line 50
/**
* If we found authentic is ok, but not found account in current forum,
* create it and redirect to default controller
*
*
*/
$userModel = new UserModel();
$data['Name'] = $Response['Name'];
$data['Email'] = $Response['Email'];
$UserID = $userModel->Synchronize($data['Email'], $data);
$Payload = $this->GetHandshake();
$ConsumerKey = $Provider['AuthenticationKey'];//$this->GetProviderKeyFromHandshake($Payload);
$TokenKey = $this->GetTokenKeyFromHandshake($Payload);
$TokenKey = empty($TokenKey)? sha1(time() . RandomString(16)):$TokenKey;

if ($UserID) {
// Finalize the link between the forum user and the foreign userkey
$this->Finalize($data['Email'], $UserID, $ConsumerKey, $TokenKey, $Payload);
}

We will create user and finalize to associate users with token,...
Next, in line 77, righ after
$TransientKey = ArrayValue('TransientKey', $Response, NULL);
you need to add this
$TransientKey = empty($TransientKey)? sha1(time() . RandomString(16)):$TransientKey;

Because Nonce is PRIMARY KEY, but some system does't use that key, and return empty string (TransicientKey empty) => dupplicate when new user added
So, use sha1(time()) to make a fake-random strong and append with a randomstring to make sure it's unique!

Next, change Finalize method to become:
public function Finalize($UserKey, $UserID, $ProviderKey, $TokenKey, $CookiePayload) {
// Associate the userID with the foreign userkey
Gdn::Authenticator()->AssociateUser($ProviderKey, $UserKey, $UserID);

// Log the user in if everything went well
$this->ProcessAuthorizedRequest($ProviderKey, $UserKey, NULL, $TokenKey);
}

In line 117, file class.proxyconnect.plugin.php
Change
if ($RealUserID == -1) {

$Authenticator->Authenticate();
if (Gdn::Authenticator()->GetIdentity()) {
Redirect(Gdn::Router()->GetDestination('DefaultController'), 302);
} else {
$RealSigninURL = Gdn::Authenticator()->GetURL('Real'.Gdn_Authenticator::URL_SIGNIN, $Redirect);
$Authenticator->SetIdentity(NULL);
Redirect($RealSigninURL,302);
}
}

Becomes

if ($RealUserID == -1) {

$Authenticator->Authenticate();
if (Gdn::Authenticator()->GetIdentity()) {
Redirect(Gdn::Router()->GetDestination('DefaultController'), 302);
} else {
$RealSigninURL = Gdn::Authenticator()->GetURL('Real'.Gdn_Authenticator::URL_SIGNIN, $Redirect);
$Authenticator->SetIdentity(NULL);
Redirect($RealSigninURL,302);
}
} else {
Redirect('/');
}

Basically, we add else condition to redirect (if not, a blank-page appear)!

After that, i can login from my app, and get auto login on app! It user doesn't exist, it get creating and log in!

This is now built into ProxyConnect as of version 1.6.

In your vanilla config.php file, set Garden.Authenticators.proxy.SyncScreen = FALSE in order to bypass this feature.

You made a typo. I'll let you find it on your own ;)

Looks like you're right: $Configuration['Garden']['Authenticator']['SyncScreen'] = FALSE