search

mozilla / mod_authnz_persona

A persona authentication module for apache
Apache License 2.0
23 stars 15 forks source link

Project status with respect to Persona shutdown #38

Open basak opened 8 years ago

basak commented 8 years ago

Hello! Debian maintainer of mod-authnz-persona here.

It is my understanding that this project never became completely independent of Mozilla's hosting, and so this software will stop working on November 30th (https://wiki.mozilla.org/Identity/Persona_Shutdown_Guidelines_for_Reliers). I'm under the impression that full federation was never implemented.

Please could you confirm if this is correct?

If this module then will become useful to nobody, then I should probably have it removed from Debian's next release.

rfk commented 8 years ago

@djc may be able to comment more, but my understanding is that you're basically correct - this module depends on the mozilla-hosted verifier [1] and so will cease to work once that service is shut down.

It may still be useful to anyone who is self-hosting the persona infrastructure, but it looks like they'd have to recompile it to point to their own verifier instance.

[1] https://github.com/mozilla/mod_authnz_persona/blob/master/src/defines.h#L21

djc commented 8 years ago

That sounds right, yes. I've toyed with the idea of creating mod_authnz_portier [1], but haven't done so yet.

[1] https://portier.github.io/

basak commented 8 years ago

Thank you for confirming! I've filed a removal in Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845582

I'd be happy for you to close this issue, but it also might be an idea to keep it open to advise others of its status ("project is broken; please help fix or help out with Portier").