3 ms·
Oauth usually implies some variability of access - ie selective permissions. Is this more a pure authn layer as opposed to authz? You have a repo on GitHub...
by hirsin 2y ago
Oauth usually implies some variability of access - ie selective permissions. Is this more a pure authn layer as opposed to authz?
You have a repo on GitHub... Have you looked at using account public keys for anything? Ie https://github.com/hpsin.keys https://github.com/hpsin.keys
I hear a lot about how those keys should get used to bootstrap pki systems but I've not seen it happen yet.
- Cyphus 2y agoUbuntu's installer supports bootstrapping ssh access with this method. Put in your GitHub username and it takes care of the rest. Works for interactive and headless installs.
- eichin 2y agoThe `ssh-import-id` package is the basic mechanism for this.
- messh 2y agoit does have authorization with the `allow` and `deny` commands for granular control of who can can see what. Currently very simple, only for email but maybe other fields in the future