4 ms·
I wonder if this concept could (and perhaps should) be extended to be OAuth provider, that lets you in based on ability to control content under arbitrary URL.
by lostmsu 5y ago
I wonder if this concept could (and perhaps should) be extended to be OAuth provider, that lets you in based on ability to control content under arbitrary URL. Maybe even standardized somehow by exposing meta tags in the HTML header.
- hardwaresofton 5y agoSo the idea is that the site is an OAuth2/OpenID connect provider, but one that actually authorizes/authenticates for a site I obviously don't own (HN). I'm not sure I fully understood your idea but setting this was exceedingly easy with the help of ORY Hydra[0], please check em out. [0]: https://www.ory.sh/hydra/docs/concepts/login https://www.ory.sh/hydra/docs/concepts/login
- lostmsu 5y agoThe idea is that your OAuth site could let me login with https://example.com/it_is_me_i_swear https://example.com/it_is_me_i_swear as long as I am able to put the token you generated somewhere in that page. Not necessarily with https://news.ycombinator.com/user?id=lostmsu https://news.ycombinator.com/user?id=lostmsu
- hardwaresofton 5y agoAhhh yep, I’ve actually got some plans for some other sites I could support! If you’re referring more to the possibility of you owning the site itself that’s possible too