External authentication

[dsmits]

Log into vantage6 with with an external identity provider (surfconext/microsoft/google/orcid)

This can be done using OpenID

[dsmits]

Can this be done for both the UI and the python client?

[dsmits]

Related: https://github.com/vantage6/vantage6/issues/917

[dsmits]

Depending on the desired identity providers, we might wanna use firebase authentication

[wbaccinelli]

Is it possible to use Firebase Authentication, but there are some points to be considered, especially for the implementation without the UI:

• After the external authentication, the users cannot be immediately redirected back, so they will have to manually copy and paste the token to be authenticated.
• Firebase is a Google product, so it will get involved to some extent event when other platforms are used.
• It is not for free if more than a certain amount of user, so not really scalable.
• We need to register the application in the all platforms we want to use anyway.

An idea could be to just handle the flow ourselves through Authlib, for example. Having a cleared idea of how many and which external authentication platforms should we be important to decide where to go.