FenTiger

Public Key

npub1n75cuv09khp07mwj4sv2jf7puy837q95sqhqvcdju8vtfqwp4kjqal2apc

NIP-05 Address

Profile Code

nprofile1qqsfl2vwx8jmtshldhf2cx9fylq7zrclqz6gqtsxvxewrk95s8q6mfqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds3fjgtg

Publishing to

relay.primal.net

Author Public Key

npub1n75cuv09khp07mwj4sv2jf7puy837q95sqhqvcdju8vtfqwp4kjqal2apc

Show more details

Last Notes

2024-12-21 10:22:23 GMT

[h2]#[zrl=https://zotum.net/search?tag=FedIAM]FedIAM[/zrl] 0.2[/h2]
"Release early, release often", they say. Well, I managed one out of two.
I've been continuing to work on my experimental federated sign-on system, [url=https://codeberg.org/FenTiger/FedIAM]FedIAM[/url].
Summary of changes since release 0.1:
[ul]
[*] Split it into three modules - user interface, IdP and RP - and start to reduce the dependencies between them
[*] Support multiple #[zrl=https://zotum.net/search?tag=OIDC]OIDC[/zrl] clients (not just Kratos)
[*] PKCE is now mandatory
[*] Take some steps towards supporting #[zrl=https://zotum.net/search?tag=ATProto]ATProto[/zrl] OAuth (not yet complete)
[/ul]
[h2]Discourse Demo[/h2]
The main highlight of this release: I have integrated FedIAM with a real application, [url=https://www.discourse.org/index]Discourse[/url].
For a slightly more interesting demo than the last one, feel free to try it out at [zrl=https://discourse.mythik.co.uk/]discourse.mythik.co.uk[/zrl]!
To log in to this forum:
[ul]
[*] [url=https://codeberg.org/fediverse/fep/src/branch/main/fep/61cf/fep-61cf.md]Hubzilla/Streams[/url] and [url=https://indieweb.org/FedCM_for_IndieAuth]FedCM[/url] users don't need to do anything special - just follow the link, and you'll be logged in!
[*] Mastodon and classic IndieAuth users can log in by clicking the "Log In" button and entering their ID to start the flow.
[/ul]
In this setup, Discourse is configured to use FedIAM as an OpenID Connect login service. It's quite crude - some of Discourse's features won't work in this configuration.
It's only a demo. I reserve the right to shut it down and/or wipe the database at any time. Don't post anything on there if you want to keep it.
[h2]Other News[/h2]
A couple of interesting developments have taken place since the release of FedIAM 0.1 back in August.
[h3]Mastodon 4.3 released[/h3]
Originally FedIAM's support for #[zrl=https://zotum.net/search?tag=Mastodon]Mastodon[/zrl] was very patchy, because it relies on some OAuth2 protocol changes which were only available in nightly builds at the time. The Mastodon team have now released these changes as part of version 4.3, so a sizeable portion of the Mastodon network can now log in via FedIAM!
[h3]ATProto OAuth2[/h3]
#[zrl=https://zotum.net/search?tag=BlueSky]BlueSky[/zrl] have revealed their design for [url=https://atproto.com/specs/oauth]federated login using #[zrl=https://zotum.net/search?tag=ATProto]ATProto[/zrl][/url]. This is not supported by FedIAM yet, but I have a basic proof-of-concept implementation of this.
The thing that's interesting about this is its use of [url=https://www.w3.org/TR/did-core/]Decentralized Identifiers (DIDs)[/url]. There seems to be a general consensus that DIDs are the future of identity in distributed systems, but to date BlueSky's ATProto login system is the only concrete proposal I've seen that makes use of them. It takes significant work to get from "maybe we could do it like this" to a design which is well-specified enough to implement in an interoperable way; the BlueSky team have put in this effort, and they've done a great job of documenting it, too.
I hope to offer full support for ATProto/BlueSky logins in FedIAM 0.3.

2024-08-25 10:07:19 GMT

Announcing FedIAM 0.1.0 - Sign in with a Fediverse account!
Suppose you want to allow people to log in to your web site. How will they identify themselves? With a username and password? We've all got far too many of those already, and they're not even particularly secure. Perhaps with a Google or Facebook account? That's a lot easier, but do we really want to allow these companies even further into our lives?
FedIAM is a [i]research project[/i] which aims to offer an alternative: using Fediverse and IndieWeb protocols, visitors can log in using any one of thousands of small, independent networks run by ordinary people - or even using a provider that they host themselves, independently of any outside influence.
Now available as open source!
#^[url=https://codeberg.org/FenTiger/FedIAM]https://codeberg.org/FenTiger/FedIAM[/url]