I was thinking about this recently too. Though I started thinking from the
login form perspective.
Things we should have:
- Good build-in support for both single-authentication (everyone is in the
user database, or everyone in ldap, etc...) and multi-authentication (some
users are local, some are OAuth, others may be LDAP) and also the
possibility of multiple auth types for one user.
- A real abstract login form that lets extensions and auth systems simply
add fields to the login/creation form without having to re-implement it
and not work with other similar extensions.
-- Perhaps also some meta information from auth plugins that let us say on
the login form that a wiki is using LDAP or something.
- Explicit support for auth systems using something other than the
username.
- Real support for auth systems involving a 3rd party. ie: Involving
redirects such as OAuth, OpenID, and simple 3rd party login where the
login link directs you to the login page of some forum, you get sent back,
and somehow the extension knows what the session is.
- Login form support for multiple authentication systems on the same wiki,
incl. support for OAuth and OpenID like logins.
That last one was the tricky one to figure out.
--
~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://daniel.friesen.name]
On Thu, 11 Oct 2012 09:31:49 -0700, Tyler Romeo <[email protected]>
wrote:
While this patch will support the functionality you are talking about, I
believe a better move would be to actually design a proper authentication
stack. Some sort of $wgAuthn where you can register authentication layers
on a stack. The problem with AuthPlugin and ExternalUser is that they are
both too separate from the local authentication process, not to mention
both require users have passwords, which is something that is not
necessarily true for certain external authentication methods.
*--*
*Tyler Romeo*
Stevens Institute of Technology, Class of 2015
Major in Computer Science
www.whizkidztech.com | [email protected]
On Thu, Oct 11, 2012 at 11:37 AM, Raphaël <[email protected]> wrote:
I've been told that attachment was stripped (was text/x-diff)
Using text/plain now.
_______________________________________________
Wikitech-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikitech-l
