[geeklog-devtalk] [Feature] Distributed Authentication

[mike at fuckingbrit.com]

Hi,

I have just uploaded a patch to the project system for geeklog 1:

http://project.geeklog.net/tracker/index.php?func=detail&aid=372&group_id=6&
atid=107

This provides Distributed Authentication for geeklog. i.e. you can login to
my
geeklog instance (http://www.fuckingbrit.com) with an account on a remote
server
currently, it only supports blogger. You can login with
username at blogger.com.

This then creates a local account for you with that username, which can be
assigned permissions etc by the admin just like any other account.

The reason behind this is that people don't like to sign up at every site in
the universe to publish a single comment, or submit a single forum thread.
Using
distributed authentication, the bar for entry to interaction with a site
that
doesn't allow anonymous posting is lowered.

I think it's a neat feature, so I stole it from Drupal ;-)

Now, I've implemented the main part, the logging in remote users, and
provided
a class for blogger.com authentication. I have code for livejournal and any
drupal powered instance. But this isn't a finished set of functionality,
but I
didn't want to charge on without getting some feedback on whether this is
likely
to be imported into geeklog, whether the system is ok, and whether my next
steps
make sense.

Here is my personal plan of action for geeklog:

1) Add some kind of display to a site with distributed authentication
enabled
   listing what remote systems can be used to login. Thinking right blocks
on
   the user login page. Or perhaps a paragraph below the login box. Not sure
   what to do with login blocks.
   
2) Provide an XML RPC system for core that allows any plugin to state it can
   provide XML RPC methods (i.e. a function plugin_export_xmlrpc would
return
   signatures for the usefulinc.com xmlrpcs.inc systems)
*cough*drupal*cough*
   
3) Provide a way to remote authenticate into a geeklog instance via part 2
so
   that people can login to geeklog.net with their fuckingbrit.com username
and
   visa-versa.
   
So my questions are, is this something that will make it into CVS? What
kind of
timeframe is 1.3.12 on? Does any one have any suggestions for a better way
of
doing this?

I have lots more ideas I'd like to push into geeklog to make it better to
do,
but, I want to get the distributed authentication done first.

Comments?

Mike

--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .