# Authenticating on a website via Ignition web module

**URL:** <https://forum.inductiveautomation.com/t/authenticating-on-a-website-via-ignition-web-module/38186>\
**Category:** Ignition\
**Created:** [August 28, 2020, 10:36pm UTC](https://forum.inductiveautomation.com/t/authenticating-on-a-website-via-ignition-web-module/38186 "2020-08-28T22:36:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mrogers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mrogers/32/4110_2.png) [@mrogers](https://forum.inductiveautomation.com/u/mrogers)\
**Post date:** [August 28, 2020, 10:36pm UTC](https://forum.inductiveautomation.com/t/authenticating-on-a-website-via-ignition-web-module/38186/1 "2020-08-28T22:36:31Z")

</div>

I’m sure that’s not a great title, but I don’t know how else to make it short. Basically, I made a small web app that is usually used in a regular web browser, but I’d like to have the ability to use it in the web browser module in Ignition 7.9.13. Normally, I have an oauth step to authenticate users, but I was wondering if somehow, from the web app itself, it could tell it was being run in the web browser module and also get a username or other info. Is that possible?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 28, 2020, 11:02pm UTC](https://forum.inductiveautomation.com/t/authenticating-on-a-website-via-ignition-web-module/38186/2 "2020-08-28T23:02:42Z")

</div>

It is theoretically possible, much like IA’s ability to tell if Perspective is running in one of its mobile apps, but it will probably require some java surgery. Be aware that a competent attacker could trace your web-apps probes of its environment and figure out how to use the same bypass you are thinking of. Note that IA’s mobile apps still use browser-based authentication providers.
