Add ability to log into a room's website via SSB (SSB HTTP Authentication)

[wsarles]

There is a a link on planetary.name for signing in with SSB. This needs to be hooked up.

SSB HTTP Authentication: https://ssbc.github.io/ssb-http-auth-spec/

[mplorentz]

The iOS part of this is blocked by some changes in go-ssb/scuttlego I think

[mplorentz]

Looks like we will need to implement the following muxrpc commands in Go:

• httpAuth.requestSolution(sc, cc)
• httpAuth.sendSolution(sc, cc, cr)
• httpAuth.invalidateAllSolutions()

Maybe we should wait to do this until we switch to scuttlego rather than doing it twice? If so I think we can move this ticket into the Blocked column. What do you think @danlatorre?

[danlatorre]

Agreed @mplorentz. Moving it to Blocked by scuttlgo migration. But the larger question is why is there a login option to a room website? Is this for room admin UI?

[mplorentz]

@danlatorre good question. Currently logging into the room's website is the only way for users to

• See a list of all room members
• Revoke their aliases
• generate invitations (if the room is not open to the public)
• Read messages from the room administrators

[staltz]

The login system was built so that rooms can be managed/interacted using a room-controlled user interface. The idea was to reduce the scope and responsibility of the UI in apps like Manyverse (and Planetary?). Manyverse's UI should control the local database, not remote databases such as the one in the room. It also allows the room capabilities to evolve without depending on Manyverse features.

Ultimately it's a matter of separation of concerns, separation of responsibilities, and avoidance of a "super app" that does everything.

This separation of concerns probably makes little sense in Planetary since both the app and the room servers are a "Planetary Inc service", but in the case of Manyverse, we don't run any servers and we want the people who develop apps to be very different to the people who host servers.