Closed punycode closed 4 years ago
While working on the #68 PR it became apparent, that trying to force the previous notions of a global CoffeeNet administrator role into the framework is counter-intuitive, since this is deeply dependent on the actual applications built with the framework.
I therefore removed that checkbox from the list above.
Sunsetting coffenet-auth
is actually not really tied to this issue, so I removed it and will now close this issue.
CoffeeNet authentication & authorization is currently based on a custom protocol on top of OAuth2. Moving forward, we want to replace this implementation with a standards based one, namely one based on OpenID Connect. This will allow a wider range of authentication sources, like Google, GitHub, Auth0 or Keycloak.
development mode
authentication scheme for easy hacking on CoffeeNet applications