[Wikitech-l] [RfC] AuthManager

2015-02-27 Thread Legoktm
Hi! Anomie, bd808, CSteipp, and myself have been working on updating Tyler's previous AuthStack RfC: https://www.mediawiki.org/wiki/Requests_for_comment/AuthManager. Our goal is to build an authentication system that is flexible enough to support the variety of usecases that MW currently

Re: [Wikitech-l] [RfC] AuthManager

2015-02-27 Thread Tyler Romeo
The primary vision I had with this RFC was to separate the idea of a MediaWiki user and an external authentication provider. In other words, an individual is logging in as a local user, and that user may be associated with one or more external users. Each external user is linked via a provider

Re: [Wikitech-l] [RfC] AuthManager

2015-02-27 Thread Bryan Davis
On Fri, Feb 27, 2015 at 12:38 PM, Tyler Romeo tylerro...@gmail.com wrote: The primary vision I had with this RFC was to separate the idea of a MediaWiki user and an external authentication provider. In other words, an individual is logging in as a local user, and that user may be associated

Re: [Wikitech-l] [RfC] AuthManager

2015-02-27 Thread Daniel Kinzler
Hi Legoktm et al! Thanks for filing the RFC. We have started to track RFCs on Phabricator now - as I can see, you have already created a ticket. Excellent! I have cross-linked it from the wiki page now. Since you asked for comments and feedback, I have put the ticket on the to discuss column of

Re: [Wikitech-l] [RfC] AuthManager

2015-02-27 Thread Brad Jorsch (Anomie)
On Fri, Feb 27, 2015 at 2:38 PM, Tyler Romeo tylerro...@gmail.com wrote: and give the users' groups from the authorization provider. Note we have no mention of this in the authentication RFC, since we're being careful to separate *authentication* (authn) from *authorization* (authz). We have