Design GitHub social login (external IDP)

[philip-gai]

• How will they connect to their github account?
• How will we persist that information? (Create account on slashkudos.com?)
• How will we know which github kudos they have access to?

[philip-gai]

How will they connect to their github account? How will we persist that information? (Create account on slashkudos.com?)

• How could we use GitHub account as an AWS Cognito Identity provider?
• How to Add GitHub Login to Your Cognito User Pool

How will we know which github kudos they have access to?

When the user logs in and is looking at the kudos, check if they have access to the repo. Cache or store somewhere if they have access or not for next time so we don't have to do this every time.

• Get repository permissions for a user

[philip-gai]

1. Follow steps to deploy GitHub Cognito OIDC Wrapper: Getting Started
   • ~Create user pool using amplify auth add~ Create it manually, then import it using amplify auth import (Docs)
   • Create an OAuth GitHub App (Can't reuse the existing GitHub App)

[philip-gai]

Deployed Cognito domains (not yet working):

• auth.slashkudos.com
• auth-dev.slashkudos.com