End-user login mechanism

[ramcq]

To switch on payments for end users (rather than just developers) to log in and make donations etc - we need to support some login mechanisms beyond GitHub/GitLab/GNOME/KDE - this could either be a few more social logins like Google + Microsoft + ... or we could do a magic link or something via email.

[razzeee]

we have google, it's just deactivated afaik (could be broken by now)

[ramcq]

Google can be... divisive... :) Is there a "works for everyone" fallback or a service we can use to add without too much infra email BS 🫠 unless we have email sending all sorted already? I do like the implicit validation of email addresses this does for us.

[razzeee]

Not really, that's kinda why I tried to push for keycloak or something similar instead of doing that part on our own.

Not a huge fan of keycloak, but it works - there might be a (young) alternative with https://kanidm.com/ now, that might be worth checking out. Also kanidm might not have identity providers yet, at least I could not find anything about that.

Another alternative would be authentik. https://docs.goauthentik.io/users-sources/sources/social-logins/ But they don't seem to have a provider for gitlab. https://docs.goauthentik.io/users-sources/sources/social-logins/#configuring-authentik

But unsure, if we can even go back to something like that now.

[ramcq]

I've stood up Authentik for home stuff, it was super straightforward.

[razzeee]

Little bit concerned about their pricing information.

[ramcq]

Oh I meant my own instance!

[barthalion]

I'd prefer magic links. I don't want us to maintain anything holding passwords AND effectively money.

[razzeee]

Had we used typescript for the backend, https://www.better-auth.com/docs/introduction would be an easy solution