Nostr event nevent1qqs9gzqk70rrrr2vcwa6rs4pmkf8s6h8v085p59mu0f8enqghcp8p6szyz06nr33uk6u9lmd62kp32f8c8ss78cqkjqzupnpktsa3dypcxk6gnr70pt

2024-12-21T10:22:23Z

[h2]#[zrl=https://zotum.net/search?tag=FedIAM]FedIAM[/zrl] 0.2[/h2]
"Release early, release often", they say. Well, I managed one out of two.

I've been continuing to work on my experimental federated sign-on system, [url=https://codeberg.org/FenTiger/FedIAM]FedIAM[/url].

Summary of changes since release 0.1:
[ul]
[*] Split it into three modules - user interface, IdP and RP - and start to reduce the dependencies between them
[*] Support multiple #[zrl=https://zotum.net/search?tag=OIDC]OIDC[/zrl] clients (not just Kratos)
[*] PKCE is now mandatory
[*] Take some steps towards supporting #[zrl=https://zotum.net/search?tag=ATProto]ATProto[/zrl] OAuth (not yet complete)
[/ul]
[h2]Discourse Demo[/h2]
The main highlight of this release: I have integrated FedIAM with a real application, [url=https://www.discourse.org/index]Discourse[/url].

For a slightly more interesting demo than the last one, feel free to try it out at [zrl=https://discourse.mythik.co.uk/]discourse.mythik.co.uk[/zrl]!

To log in to this forum:
[ul]
[*] [url=https://codeberg.org/fediverse/fep/src/branch/main/fep/61cf/fep-61cf.md]Hubzilla/Streams[/url] and [url=https://indieweb.org/FedCM_for_IndieAuth]FedCM[/url] users don't need to do anything special - just follow the link, and you'll be logged in!
[*] Mastodon and classic IndieAuth users can log in by clicking the "Log In" button and entering their ID to start the flow.
[/ul]
In this setup, Discourse is configured to use FedIAM as an OpenID Connect login service. It's quite crude - some of Discourse's features won't work in this configuration.

It's only a demo. I reserve the right to shut it down and/or wipe the database at any time. Don't post anything on there if you want to keep it.

[h2]Other News[/h2]
A couple of interesting developments have taken place since the release of FedIAM 0.1 back in August.

[h3]Mastodon 4.3 released[/h3]
Originally FedIAM's support for #[zrl=https://zotum.net/search?tag=Mastodon]Mastodon[/zrl] was very patchy, because it relies on some OAuth2 protocol changes which were only available in nightly builds at the time. The Mastodon team have now released these changes as part of version 4.3, so a sizeable portion of the Mastodon network can now log in via FedIAM!

[h3]ATProto OAuth2[/h3]
#[zrl=https://zotum.net/search?tag=BlueSky]BlueSky[/zrl] have revealed their design for [url=https://atproto.com/specs/oauth]federated login using #[zrl=https://zotum.net/search?tag=ATProto]ATProto[/zrl][/url]. This is not supported by FedIAM yet, but I have a basic proof-of-concept implementation of this.

The thing that's interesting about this is its use of [url=https://www.w3.org/TR/did-core/]Decentralized Identifiers (DIDs)[/url]. There seems to be a general consensus that DIDs are the future of identity in distributed systems, but to date BlueSky's ATProto login system is the only concrete proposal I've seen that makes use of them. It takes significant work to get from "maybe we could do it like this" to a design which is well-specified enough to implement in an interoperable way; the BlueSky team have put in this effort, and they've done a great job of documenting it, too.

I hope to offer full support for ATProto/BlueSky logins in FedIAM 0.3.

Announcing FedIAM 0.1.0 - Sign in with a Fediverse account! ...

2024-08-25T10:07:19Z

Announcing FedIAM 0.1.0 - Sign in with a Fediverse account!

Suppose you want to allow people to log in to your web site. How will they identify themselves? With a username and password? We've all got far too many of those already, and they're not even particularly secure. Perhaps with a Google or Facebook account? That's a lot easier, but do we really want to allow these companies even further into our lives?

FedIAM is a [i]research project[/i] which aims to offer an alternative: using Fediverse and IndieWeb protocols, visitors can log in using any one of thousands of small, independent networks run by ordinary people - or even using a provider that they host themselves, independently of any outside influence.

Now available as open source!

#^[url=https://codeberg.org/FenTiger/FedIAM]https://codeberg.org/FenTiger/FedIAM[/url]

Nostr notes by FenTiger

Nostr event nevent1qqs9gzqk70rrrr2vcwa6rs4pmkf8s6h8v085p59mu0f8enqghcp8p6szyz06nr33uk6u9lmd62kp32f8c8ss78cqkjqzupnpktsa3dypcxk6gnr70pt

Announcing FedIAM 0.1.0 - Sign in with a Fediverse account! ...