Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support RelMeAuth #93

Open
fluffy-critter opened this issue Apr 7, 2021 · 1 comment
Open

Support RelMeAuth #93

fluffy-critter opened this issue Apr 7, 2021 · 1 comment
Labels
enhancement New feature or request

Comments

@fluffy-critter
Copy link
Contributor

fluffy-critter commented Apr 7, 2021

A lot of folks (and IndieWeb guidance) still refer to RelMeAuth. This could be supported in Authl, although it might not be particularly straightforward. Idea for the flow:

  1. RelMeAuth provider has access to the Authl container
  2. For each rel="me" link on the identity page, see if Authl supports it, and if so, use that
  3. Proxy the identity flow for the returned identity link
  4. Return the original URL as the profile page. Bonus: Fuse the identity provider's profile with the h-card profile?

OPTIONAL: It would be nice if Handler.handles_page is able to provide an extended name, e.g. "RelMeAuth (via Twitter)". Since handles_page currently returns bool it could be changed to return Union[bool,str] and if it's a str that's a signal that it overrides the name.

@fluffy-critter
Copy link
Contributor Author

#108 does a partial implementation of RelMeAuth, but for it to be complete, it needs to check the backlink to the profile page and then report that as the canonical profile URL, which is also much more involved. Coming up for an appropriate flow for true RelMeAuth that works within the Authl API is proving difficult.

Perhaps treating RelMeAuth as a fully-fledged provider and having it implement the callback flow as a proxy thing with the underlying provider onion-wrapped inside would work, but I start to worry about complexity and attack surface.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant