Re: Google signin

On 12 Jul 2017, at 15:31, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
<snip>
> OpenID is not, OAuth 2 is.
>
> Google, Github and Facebook all speak OAuth 2. I have working implementations for both Google and Github, so I'm sure it would be easy enough to make one for Facebook. I will see how much work it is to move that code over instead of using the Google javascript API that I did now. TBH, it's probably *easier* because it's not javascript :)

As a thought, we could implement something like Auth0 (auth0.com),
which does OAuth2 and provides a login for Google, FB, LinkedIn, GitHub,
and others.

Pro's
*****

* Pretty simple to implement
* It has a reasonable management interface for picking and choosing
with auth providers to allow (eg we can choose GitHub, Google, FB,
and no enable others)
* The management interface has reasonable reporting too, to show
user activity, stats, etc
* Free for Open Source projects
* They're PG friendly, with instructions for using PG in their setup
docs :)

Con's
*****

* Not Open Source, though their setup examples and other supporting
bits are on GitHub

My main focus project (dbhub.io) is using Auth0, and it's been flawless
so far. We're still in dev mode though, so haven't yet rolled it out
"at scale". ;)

If you want to see Auth0 in action, just head to our dev server and click
the login link on the top right:

https://dev1.dbhub.io

It's all pretty simple/straightforward. :)

+ Justin

--
"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
- Indira Gandhi