login for non-Twitter users

mc2 commented 7 years ago

Maybe I'm weird, and prefer email/password logins.

Prefer not supporting identity integrations with large corporations.

Will look for that feature in the future. Thanks! Good Luck!

plpxsk commented 7 years ago

I'm wondering (@ team): are there plans to incorporate non-twitter login?

friedger commented 7 years ago

Maybe try blockstack.org ids?

jalcine commented 5 years ago

I'm down to contribute a patch for IndieAuth + IndieLogin.

CloCkWeRX commented 4 months ago

So, the auth controller is via https://github.com/upcoming/upcoming-www/blob/master/controllers/auth.js and passport.

https://www.passportjs.org/

There are many, many strategies; but a few common ones: https://www.passportjs.org/packages/passport-google-oauth/ https://www.passportjs.org/packages/passport-facebook/ https://www.passportjs.org/packages/passport-mastodon/

I personally would not recommend Facebook, as they have a bullshit app review process where they attempt to dictate what your application does; while feasting on the user data.

The main friction here is setting up the API keys for all of these providers, which is a bunch of hoops to jump through.

https://www.passportjs.org/packages/passport-indieauth/ is marked as "not ready"

CloCkWeRX commented 4 months ago

Other considerations:

Account link or merge when multiple auth is used, to avoid duplicates but also avoid account take over
https://github.com/jwalton/passport-api-docs?tab=readme-ov-file#passportauthorizestrategyname-options-callback appears to be the thing to look at

upcoming / upcoming-www

login for non-Twitter users #50