4 ms·
@jeffbarg just FYI I've thought about this some more and I really like this idea. I'm planning to add it. You could have a client talk directly to emauth.io to
by anderspitman 7y ago
@jeffbarg just FYI I've thought about this some more and I really like this idea. I'm planning to add it. You could have a client talk directly to emauth.io to get a JWT, then they can authenticate against any server that accepts emauth.io-formatted JWTs (probably just email and timestamp). It essentially decouples clients from servers.
- anderspitman 7y agoJust as an update, on successful email verification emauth.io now returns signed JWTs which currently contain the email address, iss ("https://emauth.io" https://emauth.io"), and iat. They can be verified using the public key available at emauth.io/pubkey. Thanks for the idea!