Lance Ivy

Configuration files and command line flags have been on my wishlist since launch! I think those formats provide much better opportunities for discovering and documenting options. I find it hard...

Yep, I'd like to see AuthN support the configuration you describe. My main concern here is working towards a minimum (but necessary) set of environment variables. The current ones appear...

For now, I'm happy to introduce new variables that can function in a simple (port) or advanced (ip and port) fashion. Deprecation warnings for the old variables would be a...

The reason those two endpoints don't set the ID token as a cookie is because AuthN may not be on the same domain as your main app. The authn-js client,...

Sounds nice! I would really appreciate not needing custom code for each provider. My only question is how to handle the UserInfoFetcher. Any thoughts?

Yes that's right. I will make time to review and refresh my memory on what the next steps are. Maybe the best way to handle this is with a pre-release,...

Thanks for this idea! I need to consider this a bit more and decide whether this problem is a concern of the email address as a unique identifier (AuthN's problem),...

Could you say a bit more about how disposable accounts impact your application? What is the difference between someone signing up with a temporary email provider and someone signing up...

Okay, here's the goal: Create one single new config variable. When enabled, AuthN will: * forbid temporary email services (TBD: choose a quality list) * disable sub-addressing (`[email protected]` and `[email protected]`...

Hi @egorsmkv -- A web GUI could be fun! I think it could visualize the [active account stats](https://github.com/keratin/authn-server/blob/master/docs/api.md#service-stats) and provide a browse-and-click interface for all of the administrative functions (lock,...