search

skoruba / IdentityServer4.Admin

The administration for the IdentityServer4 and Asp.Net Core Identity
MIT License
3.56k stars 1.15k forks source link

Separate Admin/UI from Identity Server, so developers can use with other providers #718

Open weedkiller opened 3 years ago

weedkiller commented 3 years ago

Hello there was a major announcement today that IdentityServer its no longer free going forward.

I work for mom and pops stores who cant afford to be in this position. There was a huge commitment to using your framework and lot of work has gone in by @skoruba and others here.

So, for the health of the project we need to see an option to use a different backend other than Identity Server. I just hate that MS dropped the ball on something so important. This core component should have been a feature in the main framework.

skoruba commented 3 years ago

I think it won’t be an issue, it will be possible to use IS but you will need buy the license according to your requirements. I will observe the details around this update and I will see what will be possible to do. 😊

martinussuherman commented 3 years ago

@weedkiller I think IdentityServer4 will still be free, cmiiw. This is what their github says (emphasis added): As of Oct 1st 2020, we started a new company. All new feature work will happen in our new organization. The new Duende IdentityServer is available under both a FOSS (RPL) and a commercial license.

sephit commented 3 years ago

It is expensive as it sounds with 1,500 USD /year, i believe the price tag is for SaaS right? If anyone work (like me) in small projects, this price will be a real problem. Is there any "low" alternative for small business?

clooge commented 3 years ago

Hi @skoruba, please share your ideas, this dependency is also very critical for other small businesses who rely on this component!

@martinussuherman it maybe free now, but what happens when you **need bug fixes** on a critical security component. I am not willing to use an older outdated version.

IMHO -### I want to point out, Much of the usage/success to Identity Server only came AFTER Skoruba & community developed the admin UI Before that, it was hard to setup and configure, took too much time. Look at the evidence below it speaks volumes

image

image

larsfjerm commented 3 years ago

What about an integration with https://github.com/openiddict/openiddict-core ?

skoruba commented 3 years ago

Hi guys,

thank you for your tips/ideas.

The IdentityServer4 is amazing project and that was the reason why I built this AdminUI, because I wanted to help others with setup and offer something also free for managing IS4 through the UI.

I totally understand why the creators moved to the comercial licensing, it absolutely makes sense, because maintenance of OSS projects is very difficult and every developer needs money and it seems that sponsorship is probable not enough.

Currently I will continue to upgrade to IS4 version 4 and I will see how will work the licensing model for new Duende IdentityServer - maybe I will prepare some free Admin UI for Duende IdentityServer, but I do not know how the licensing will allow to build something from OSS community. 😊👍

weedkiller commented 3 years ago

We are requesting a proxy/interface or a DI pattern or something similar, so we can inject openiddict-core to replace Ident Svr.

PLEASE Let the developer reuse your UI work in other frameworks like openid-dict please.

We will do the integration work if Skoruba has a DI or Interface pattern exposing the api for us to use it.

@larsfjerm mentioned OpenIdDict and only now I came to find it was used by orchard core, the developers there are helpful and open, but don't know Skoruba UI integration, so if you give the option we can develop and contribute.

skoruba commented 3 years ago

@weedkiller - I've checked the openiddict-core - especially ef store and entities are for sure absolutely diferent, so it is not easy way how to port this UI (which is strictly connected to IS) to openiddict-core, some rewrite will be required.

clooge commented 3 years ago

Hi @skoruba FYI - its being used in Orchard which is forever free.

Can I also chime in, going forward can you please consider other frameworks to use and tie into your GUI easily, give us a mechanism to do so. Just play some level of abstraction so we can have some integration. After all, Open ID is a standards based framework!

maldworth commented 3 years ago

I think that Duende IdentityServer will be dual license commercial + RPL). So if this project remains free and open source, then you can still use Duende IdentityServer, and continue updating with it.

It just means anybody here using and wanting to move past .net core 3.1 (.net 5 +), will need to pay the license. I understand that's a separate issue, but remember that EoL for .net core 3.1 is almost 2 years out, and I hope with enough community feedback that they relax their licensing model (not base it on number of clients), so smaller shops won't be priced out of using it at all.

clooge commented 3 years ago

Hello Maldworth, please the/read the fine print again. As of October any future development is commercial and updated versions are commercial purchases, there was a post on it but it was deleted.

In effect it does not matter if Skoruba is free it simply useless unless we buy Identity Svr or make all our code open source. We run a community web site which only takes donations so the mid range pricing with 8 clients is close to 28,000 per yr.

I appreciate you sharing information, but we need a non-commercial option, hoping to reuse this wondering Skoruba with the orchardCMS Identity platform or the Identity Manager etc

maldworth commented 3 years ago

@clooge Oh I get it, the licencing that they have proposed is untenable for many small shops. I still have some hopes that they will get enough community feedback and relax that, or perhaps work with smaller shops on a case by case basis (it can't hurt to fire them an e-mail and give them your situation, I'm sure alternative enterprise pricing options can be worked out).

But on their main page in the github repo it says

This repo will be maintained with bug fixes and security updates until November 2022.

So that means, until Nov 22, you can still continue using it, and even get critical bug fixes and updates, but no new features. So Skoruba can continue to be developed and used for all the people considering remaining until Nov 2022.

So right now, Skoruba can continue to work with the remainder of the FOSS Identity server 4 (the one which gets bug fixes and security updates).

Skoruba can also make a Fork, maybe called the IDentityServer4.Admin.Duende, in which it will move along with the new repository that is licenced.

This new product will remain open source but will be offered with a dual license (RPL and commercial). The RPL (reciprocal public license) keeps Duende IdentityServer free if you are also doing free open source work.

This line indicates to me that they would be fine with Skoruba IdentityServer4.Admin because it's free and available on github as open source.

I don't know of any deleted posts, but this seems not to be the end of Skoruba IdentityServer4.Admin

selangley-wa commented 3 years ago

Hey All. They announced a free, community edition of Duende's IdentityServer https://blog.duendesoftware.com/posts/20201210_community_edition/

See if the licensing terms make sense for your environment.

skoruba commented 3 years ago

@selangley-wa - Thanks for your information, I will release this Admin UI for Duende IdentityServer next year.

weedkiller commented 3 years ago

How long before the community version goes away when they come with a new version 6???

Its time to start thinking about a decoupled architecture so Skoruba can be leveraged with other frameworks via DI. Just give the developers a chance to implement something... are you design this

skoruba commented 3 years ago

@weedkiller - I am working on IS4 Admin 2.0.0 and then I will convert version 2.0.0 to Duende IdentityServer.

weedkiller commented 3 years ago

Please use a DI option to use / swap out with open-ID-Core, if needed as @larsfjerm suggested. We need to plant the seeds so it can give someone in the community the chance to adopt other versions.

skoruba commented 3 years ago

@weedkiller - Unfortunately, I do not have a time for porting this UI to openiddict, you can fork this project and you can start with this rewrite, if you are interested in this migration. Thanks!

jbraun27 commented 3 years ago

@weedkiller See Kevin Chalet's post about openIdDict and Identity Server4 You also may want to look into using OrchardCore as a headless CMS in SaaS mode for OpenID auth.

weedkiller commented 3 years ago

@jbraun27 thanks for sharing that I saw it.

I also like skoruba very much, and if it was developed with anInterface /DI design, we could adopt do the leg work to make it work with other providers.

weedkiller commented 2 years ago

https://fusionauth.io/pricing/ is Another Opensource Option

https://github.com/orgs/FusionAuth/repositories

mooreds commented 2 years ago

Hiya, just wanted to follow up on this post and let you know that while FusionAuth is free in many use cases, it is not open source. Here's the license and the license FAQ which may be helpful.

https://fusionauth.io/license/ https://fusionauth.io/license-faq/

Cheers.