On 12 Jul 2017, at 15:31, Magnus Hagander <magnus@hagander.net> wrote:
<snip>
> OpenID is not, OAuth 2 is.
>
> Google, Github and Facebook all speak OAuth 2. I have working implementations for both Google and Github, so I'm sure
itwould be easy enough to make one for Facebook. I will see how much work it is to move that code over instead of using
theGoogle javascript API that I did now. TBH, it's probably *easier* because it's not javascript :)
As a thought, we could implement something like Auth0 (auth0.com),
which does OAuth2 and provides a login for Google, FB, LinkedIn, GitHub,
and others.
Pro's
*****
* Pretty simple to implement
* It has a reasonable management interface for picking and choosing with auth providers to allow (eg we can choose
GitHub,Google, FB, and no enable others)
* The management interface has reasonable reporting too, to show user activity, stats, etc
* Free for Open Source projects
* They're PG friendly, with instructions for using PG in their setup docs :)
Con's
*****
* Not Open Source, though their setup examples and other supporting bits are on GitHub
My main focus project (dbhub.io) is using Auth0, and it's been flawless
so far. We're still in dev mode though, so haven't yet rolled it out
"at scale". ;)
If you want to see Auth0 in action, just head to our dev server and click
the login link on the top right:
https://dev1.dbhub.io
It's all pretty simple/straightforward. :)
+ Justin
--
"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
- Indira Gandhi