search

teekkarispeksi / nappikauppa2

MIT License
2 stars 1 forks source link

Authenticate against WordPress #97

Open Blizzara opened 6 years ago

Blizzara commented 6 years ago

Current authentication works by trying to call https://github.com/teekkarispeksi/confluence-groupchecker. Now that we have migrated away from confluence, would be nice to check the ACL from WP instead.

To fix: figure out how WP permissions work and write wp-groupchecker that has the same contract as confluence-groupchecker.

palojos commented 6 years ago

After some research, I come conclusion with two options. Either create custom WordPress rest api endpoint with plugin to authenticate and query user data from WordPress database, or implement OIDC authentication support.

With OIDC we could use any available OIDC provider, for example Google, Facebook etc. And hopefully at some point there will be WordPress plugin for WordPress to work as an OIDC provider.