dennisreimann / masquerade

masquerade is the predecessor of masq: https://github.com/dennisreimann/masq - please consider using masq from now on, as it is the more modular approach.
MIT License
218 stars 46 forks source link

possible to block / approve users from signing up to my openid broker #13

Closed jippi closed 8 years ago

jippi commented 14 years ago

Hi,

I think it would be awsome if I could

a) put the OpenID broker into "read-only" mode, where people can't sign up b) be able to require manual activation of new users on the broker (admin feature) c) "a)" + generate invitation codes people can use to bypass the lock-down

Thanks! :)

dennisreimann commented 14 years ago

Getting masquerade ready for Rails 3 I want to switch from using restful_authentication to Device which has a lot of the mentioned functionality built-in.

jippi commented 14 years ago

Okay :)

I'm quite happy with Clearance ! :) I even made a facebook connector too.. .and it got dead simple twitter / OAuth intigration

dennisreimann commented 13 years ago

Now that it's Rails 3 compatible I don't think it is necessary to bring in Devise, as the current approach (restful authentication) works well enough. If you'd still like to have this feature it would be great if you could implement it :)

djmaze commented 13 years ago

Thanks to @nougad, a) has now been implemented (see a9b300391c5c479c7130). b) is half implemented (see 62ba5e320993e6d58548087434f6505913c4ced1).

jimcavoli commented 12 years ago

Implementing c) is tricky on a large scale without having a full-blown admin interface for Masquerade, which in my opinion, is way too heavy duty and unnecessary. The best way I can think to do this would be to put a list of accounts allowed to generate invite codes into the config file, and having that option show if the provider is running in restricted-registration mode. I could do this after polishing off the OmniAuth branch. Thoughts?

dennisreimann commented 12 years ago

In my opinion having an admin area where one could create/manage accounts would be the most transparent solution. I think we should discuss that after Jim's migration to OmniAuth is done, as there are some more thoughts I have about making masquerade more modular.

jimcavoli commented 12 years ago

Agree. Let's hold this until #15 and the OmniAuth development is done; modularizing more of Masquerade sounds like a good thing...hopefully I can help get us off in a good direction and implement some of those thoughts!