Feature request: Alternative option as Laddr login

[schlos]

• LDAP
• OAuth

Is it possible to add LDAP or OAuth as login method on Laddr?

@themightychris could you outline what is needed in order to make it happen?

Thanks!

[schlos]

Just to explain, I meant using external user database i.e. own oAuth server as a way to login to Laddr.

[themightychris]

oAuth can't be generically implemented, it's not really an SSO protocol, a signin integration has to be built specifically for each provider. Twitter and Facebook signin is already available for emergence, @rowdychildren has started implementing them for Laddr. I'd like to add github too which there's already an open issue for it

LDAP is complex and old school, I don't see a lot of value in implementing it unless someone actually needs it and has an LDAP server already

SAML2 is a proper web-based SSO protocol and laddr actually already supports serving as an identity provider. If we wanted generic support for external auth systems, adding saml2 client support would be the way to go.

Personally I'm not a big fan of ceding account control to 3rd party proprietary social networks just to save people from filling in 4 fields they could type from muscle memory. Signing in with a 3rd party services still takes almost at many fields and adds a trust barrier. Are people really falling off because we asked them to fill out first/last/username/email/password? I think that's a fiction facebook and google have sold us because they want to collect as much information as possible for advertisement. Maybe that's true for light-touch consumer apps and games that are clawing for eyeballs, but brigades are a very different beast. Brigades need to have ecosystems of tools with something open source and sovereign in the middle. I'm not against having it as an option though

[RowdyChildren]

I am currently working on the GitHub integration, it may be a month or so before I have something that is actually working because I have limited time as I adjust to College ;) I like the idea of linking an account instead of a "Sign Up"