[hamitturkukaya]

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• There are no open pull requests for the same update

for shared-credentials.json

• There's evidence the domains are currently related (SSL certificates, DNS entries, valid links between sites, legal documents etc.)
• One or more of the following:
  • If using shared, the new group serves login pages on each of the included domains, and those login pages accept accounts from the others. (For example, we wouldn't use a shared association from google.co.il to google.com, because google.co.il redirects to accounts.google.com for sign in.)
  • If using from and to, the from domain(s) redirect to the to domain to log in, and previously served their own sign-in forms, so users are likely to have accounts saved for them in password managers. (If a from domain never served a sign-in form, there are no saved accounts for it to share, and it shouldn't be included. It is not our goal to document every redirect on the web; we only document redirects where users of password managers would find value.)

Evidence

kardoapp.com and kardopos.com are the same Kardo POS product (restaurant / cafe point-of-sale) served by one backend.

• Same TLS certificate: the certificate served on kardoapp.com (CN=kardoapp.com) lists kardoapp.com, www.kardoapp.com, kardopos.com and www.kardopos.com together in its Subject Alternative Names.
• Redirect: https://kardoapp.com/ and https://www.kardoapp.com/ answer 301 to https://kardopos.com/.
• Login pages on both domains, same accounts: https://kardoapp.com/isletme/giris and https://kardopos.com/isletme/giris serve the same venue sign-in form and accept the same accounts. The newer venue dashboard at https://venue.kardopos.com/auth signs in with those accounts too.
• Digital Asset Links: every one of these origins serves the same /.well-known/assetlinks.json, which declares delegate_permission/common.get_login_creds between kardoapp.com, www.kardoapp.com, kardopos.com, www.kardopos.com and venue.kardopos.com:
  • https://kardoapp.com/.well-known/assetlinks.json
  • https://kardopos.com/.well-known/assetlinks.json
  • https://venue.kardopos.com/.well-known/assetlinks.json