suggestion : improving auth

[mohamedhoss123]

it seems to me that the auth part in the library is ment to use with jwt ( witch i disagree to use in most of web apps but this is another story ) and docs don't show how to make a custome auth provider or custome session handler for auth witch is kinda a problem as only source code have google oauth but docs don't show how to use it so the idea is :

• make the framework able to be extended and provide interface to create a db session you can give lucia a look as from what i see it's better than auth.js and passport
• for Oauth2 providers i see you implement , i prefere to use arctic witch is a library provides some built in providers including for example (apple , google , discord , facebook , ...etc)
• for Oauth2 providers that is not supported by arctic you can use oslo witch is a A collection of auth-related utilities based on what said in github repos that makes your life easier gives you alot of helpers for example the following :
  • jwt helpers
  • oauth2 Provides utilities for working OAuth 2.0 based on RFC 6749 and RFC 7636. Can be used for OpenID Connect.
  • otp for hotp and totp to use with app authenticator for example
  • password provide some password hashing (Argon2id, Bcrypt, Scrypt)
  • and more but this is the most important
• it would be great if the library can provide interface for oauth2 so user can use oslo helper to make with any provider he wants

I really like what are you doing in this project keep going 🦾

[hassanzohdy]

@mohamedhoss123 Thanks Mohamed for your suggestions, i really appreciate it.

I'll have a good look at these packages you provided and see what can be done with it.

If you feel you could participate with us in this section it will be awesome.