Mastodon Federated Authentication

[Kunsi]

Requiring everyone to have a contract with Github (aka Microsoft) is not feasible anymore. We should support more authentication providers.

Possible providers:

• C3 Hub
• Mastodon
• CCCV SSO

[matmair]

@Kunsi is this something that should be worked on still? I have some time between now and day 0 so I could look into it

[Kunsi]

@matmair basically most of the work is now done, it's easy to add support for additional providers now, as long as they support oauth2.

If you're willing to implement mastodon login support, that'd be great, otherwise i'd be tempted to just close this issue as done.

[matmair]

I'm sure willing to try tackling this @Kunsi! By Mastodon do you mean a specific instance or is there a federated login I am unaware of?

[Kunsi]

Unfortunately not. You'd basically have to do what all the app developers have to do, create an app for each instance (i think this might be doable using an API without login?), then have users log in via that app.

I have briefly looked into that and then decided it's too much effort to implement. (Keep in mind we then also have to track which app credentials have to be used for which instance, store them across restarts, make them backup-able etc).

[matmair]

I have to concur, selecting the relevant instances and gathering app credentials seems like a lot of work. Maybe the hub makes more sense?

[Kunsi]

Hub is already supported.