search

bkad / prat

group chat with markdown served over websockets
11 stars 6 forks source link

Consider moving authentication to OAuth2 or accountchooser.com #47

Closed mdietz closed 11 years ago

mdietz commented 12 years ago

OAuth2 is going to be better supported and give us finer grained control over the scopes we're asking for (email and profile scopes).

Accountchooser.com should give us a wrapper that will allow users to authenticate with the big 3-5 identity providers (Google, Facebook, Hotmail, Twitter, Yahoo). See: https://www.accountchooser.com/learnmore.html

cespare commented 12 years ago

Do we care about authenticating with anything other than Google?

mdietz commented 12 years ago

We really should. I'd say Twitter / Facebook / Google are the bare minimum of main identity providers to support. Unfortunately they use OAuth1, Facebook Connect, and OAuth2/OpenID respectively so there might be some pain involved in supporting all those protocols.

cespare commented 12 years ago

Why? For instance, we only support Chrome -- no other browsers. What's the compelling reason for supporting a bunch of auth methods?