[geeklog-devtalk] "External authentification", again

[Michael Jervis]

> Personally, I'm not too happy about the idea of making the 

> username longer, but can't really provide any logical reasons 

> for that either.

> Just a gut feeling ...


Just plain meanness? ;-)
 

> How's that for a solution? Mike?


IF the username is not ALREADY unique, prompting the user for a new one is a
workable solution.


> 2) Selecting external service

> Obviously, there has to be a way to select which external 

> service you would allow users to log in through. IIRC, Mike's 

> implementation uses modules for each service, so by 

> uninstalling / not installing a module, you disallow use of 

> that service.


Correct. You are prompted by service from a drop down, this is populated by
scanning available modules. Delete a module file, no authentication via that
service. The version on my dev instance shows the full gui here:

http://dev.fuckingbrit.com/public_html/users.php
 

> The only problem was that using "Geeklog" as a login option 

> would allow login via pretty much any Geeklog site in 

> existence - including, possibly, ones set up by spammers.

> 

> Was there any solution for this or do we just add a big 

> warning in the documentation?


Well, as yet, there is no authentication SERVER service for geeklog, so for
now I thought the approach was to restrict to available SERVICES rather than
sites. i.e. the LiveJournal Service, the Blogger service, but not the
fuckingbrit.com site. 
 

> 3) Disabling accounts

> There probably aren't any open issue with this, other than 

> that it has to be implemented. Mike, IIRC, you thought about 

> having a go at it. Any success?


Much as per your recent availability, I've had no time for gl hacking for a
few weeks. And it's not looking good for the next few weeks either.
 
I wanted to get the disable account sorted, and get the typekey stuff done,
but things have conspired against me. I've been busy, I've got some
contracts to do in my spare time, and I've migrated my main site away from
geeklog for some practical reasons.

Cheers,

Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3030 bytes
Desc: not available
Url : <http://eight.pairlist.net/pipermail/geeklog-devtalk/attachments/20050313/d5ba90ef/attachment.bin>