search

Herbal3d / OSAuthModule

OpenSimulator module for fetching JWT authentication token
Apache License 2.0
0 stars 1 forks source link

IMHO this is mission critical #1

Open echads opened 12 months ago

echads commented 12 months ago

I know on a recent blog post you were searching for what to do next. IMO A proper auth system for either/both Vircadia and opensimulator has been neglected for far too long. I know Vircadia has an option to turn on a wordpress OAuth login that I think is a paid Open Orange thing. However a proper identity protection setup for both projects that would allow login with something like Mastodon which features built in MFA is something absolutely needed in 2023 and would be a huge contribution IMHO.

Misterblue commented 11 months ago

The NGC project (https://github.com/OpenSim-NGC) is working in that direction. They have talked about how to code ownership and identity into a new OAR format as well as building an better system for content ownership and provenance. There are several good identity systems on the web (systems like used by Mastodon or Matrix). There are problems with key revocation (thinking about long time age of OAR files and when grids go down).