Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Are there post Persona plans ? #84

Open
freedomtrain opened this issue Jun 29, 2016 · 5 comments
Open

Are there post Persona plans ? #84

freedomtrain opened this issue Jun 29, 2016 · 5 comments

Comments

@freedomtrain
Copy link

I'am interested in deploying a large wiki farm.
Are there currently alternatives to Persona ?
I m hesitant to begin a wiki farm without an understanding of what the direction will be post persona

Thanks

@WardCunningham
Copy link
Member

@paul90 is leading our work on modular security with plugins for the most obvious choices. See for example, https://github.com/fedwiki/wiki-security-passportjs.

@paul90
Copy link
Member

paul90 commented Jun 29, 2016

The initial replacement for Persona is to provide authentication using a small set of Passport strategies, currently GitHub, Google, and Twitter. Adding other strategies should be relatively simple.

Currently there is a wiki next branch, installable using npm install wiki@next, that includes this new security plug-in together with the associated changes to both the client and server. Documentation on configuration is currently in progress.

The longer term vision is to have an option that does not rely on an external identity provider - in all probability using webid-tls, webid-rsa or HTTP-Signature. But there were, and still are, a number of unanswered questions about those when started on this journey.

@herbsmn
Copy link

herbsmn commented Jan 17, 2017

has anyone considered using Indie Auth for this?

@WardCunningham
Copy link
Member

Yes, I attended a presentation on Indie Auth at Indie Web Camp but that was before we had Paul's pluggable security infrastructure. I just remember being lost before the session was over.

@paul90
Copy link
Member

paul90 commented Jan 18, 2017

I briefly looked at it, and IndieCert, for a replacement for Mozilla Persona. Both were dismissed as the assumptions they make about users were not valid for at least a portion of the existing wiki users.

I'm not aware of anybody currently considering a security plug-in using IndieAuth.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants