fedwiki/wiki

Are there post Persona plans ?

freedomtrain opened this issue · 5 comments

freedomtrain commented

I'am interested in deploying a large wiki farm.
Are there currently alternatives to Persona ?
I m hesitant to begin a wiki farm without an understanding of what the direction will be post persona

Thanks

WardCunningham commented

@paul90 is leading our work on modular security with plugins for the most obvious choices. See for example, https://github.com/fedwiki/wiki-security-passportjs.

paul90 commented

The initial replacement for Persona is to provide authentication using a small set of Passport strategies, currently GitHub, Google, and Twitter. Adding other strategies should be relatively simple.

Currently there is a wiki next branch, installable using npm install wiki@next, that includes this new security plug-in together with the associated changes to both the client and server. Documentation on configuration is currently in progress.

The longer term vision is to have an option that does not rely on an external identity provider - in all probability using webid-tls, webid-rsa or HTTP-Signature. But there were, and still are, a number of unanswered questions about those when started on this journey.

herbsmn commented

has anyone considered using Indie Auth for this?

WardCunningham commented

Yes, I attended a presentation on Indie Auth at Indie Web Camp but that was before we had Paul's pluggable security infrastructure. I just remember being lost before the session was over.

paul90 commented

I briefly looked at it, and IndieCert, for a replacement for Mozilla Persona. Both were dismissed as the assumptions they make about users were not valid for at least a portion of the existing wiki users.

I'm not aware of anybody currently considering a security plug-in using IndieAuth.