Now that @MozillaPersona is shutting down, the only good way to do email-based login is how @poetica does it.
2
6
14
@aaronpk yes! I'm keen to try putting together a @poetica style login experience backed by @openid connect.
1
@rfkelly @aaronpk @openid nice! Let us know if there’s anything we can help with
1
@poetica @aaronpk is there a library that provides oauth support detection? or do you just have to implement each provider and detect that?
1
@bretolius @aaronpk that was one of the motivations for webfinger. Instead, yeah, we just have a white-list of providers and some detection.
1
2
Replying to @blaine
@blaine @bretolius If any of the new OAuth2/OpenID Connect stuff ends up widely deployed it will solve that. We can hope for the best.

Jan 21, 2016 Β· 4:19 PM UTC

1
1
Replying to @aaronpk
@aaronpk @bretolius does the new stuff finally specify an email discovery mechanism? I still strongly maintain that URLs simply don't work.
1
1
@blaine @bretolius The latest proposed Discovery draft does actually mention WebFinger and email discovery! tools.ietf.org/html/draft-jo…

OAuth 2.0 Discovery

This specification defines a mechanism for an OAuth 2.0 client to discover the resource owner's OAuth 2.0 authorization server and obtain information needed to interact with it, including its OAuth...

datatracker.ietf.org
1
1
1
more replies