search

Troglodyne-Internet-Widgets / tCMS

A Perl CMS with a focus on multiple media types, and flexible data storage backends
Other
2 stars 6 forks source link

Improve auth code #256

Open teodesian opened 2 years ago

teodesian commented 2 years ago

https://metacpan.org/pod/Dancer2::Plugin::Argon2

github ory/kratos might also be a good thing to consider supporting.

teodesian commented 2 years ago

https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-subrequest-authentication/

We should use an entirely 3rdparty auth solution such as keycloak -- this will allow us to have nginx handle route restriction, and have tcms consult ACLs.

teodesian commented 2 years ago

Other options: https://github.com/apereo/cas https://github.com/gate-sso/gate https://www.keycloak.org/ SQRL at the GRC

teodesian commented 2 years ago

Example of using the nginx stuff: https://tailscale.com/blog/tailscale-auth-nginx/