3 ms·
Can’t you just allow Github/etc OAuth?
by Klonoar 3y ago
Can’t you just allow Github/etc OAuth?
- vilunov 3y agoI host a number of services for me and close friends and family, and I limit the access by manually creating accounts for them. I could enable OAuth via 3rd party service, but that would mean I'll have to pay much more attention to setup of ACLs, as these users will have a new account created for them with a link to their Github account. Besides, I want to stay more or less independent from 3rd party services, particularly I'm bothered by the need to explicitly register an OAuth client. AP has a much better flow in that regard, services can interoperate without a given permission to do so.
- lolinder 3y agoMost of the point of running your own Gitea instance is to help move FOSS away from GitHub's stranglehold. A proper federation protocol for the decentralized alternatives would be far more useful for that goal than enabling GitHub OAuth.
- Klonoar 3y agoLook, I'm aware of the point of Gitea/etc. I also don't really care. I want people to be able to easily contribute so they don't give up and just go back to GitHub. OAuth with a GitHub access level solves this, full stop. A proper federation protocol is correct and the right option long term but there is no need to knock what actually works right this moment. Doing the right option often takes far longer than is ideal.
- nine_k 3y agoFor people using GitHub, yes. The point is to allow people not using GitHub to contribute easily. OAuth and ForgeFed solve different, though related, problems.