small-hack/argocd-apps

OIDC for mastodon?

Closed this issue · 2 comments

So the downside is that the fediverse can sometimes have bad actors and this would expose the OIDC provider to those attackers if something controversial is said online

Cloudymax and I talked about this offline, and we decided we'll just do two-three factor for mastodon (depending on what's available) and then have it write to an isolated minio tenant away from the rest of the infra. In the future, we'll perhaps have an isolated oidc provider as well, but for now, mastodon will not work with zitadel out of the box

See #256 for additional work to be done