3 ms·
I tried it a while ago and was blown away by the weird restriction of requiring federated login from providers like Google to use a system designed to be decent
by api 10y ago
I tried it a while ago and was blown away by the weird restriction of requiring federated login from providers like Google to use a system designed to be decentralized. Seemed like a really strange arbitrary restriction that prevented its use on private networks for one.
- ocdtrekkie 10y agoThere is also the passwordless email login method, where it sends you an email with a token to login. You can use this with any email account. The reason a traditional "Sandstorm account" option has been skipped is I believe because they felt things like 2FA and such and other security features common to accounts like Google and GitHub would take a lot of work to implement themselves and that these already offered that. It has also always been on their roadmap to figure out a way to do some sort of GPG login or something.
- kentonv 10y agoThat was a restriction very early on, but we've supported e-mail login for a long time. And as of today, LDAP and SAML login are now available in the base project as well (used to be paid features), so you can run a local LDAP server or SimpleSamlPhp for self-contained login. See also: https://github.com/sandstorm-io/sandstorm/tree/master/roadmap/platform/accounts#globalfederated-authentication https://github.com/sandstorm-io/sandstorm/tree/master/roadma...
- fps 10y agoThe outsourced login is the default, but it's optional. You could easily set up email/magic link based login on both Oasis and the self-hosted version.