Oauth2 provider that connects to MT auth DB via SRP #4906

New Issue

AliasAlreadyTaken · 2023-07-08T23:54:58Z

AliasAlreadyTaken commented

2023-07-08 23:54:58 +00:00

In the beginning, we only had gitea as a secondary system, whoever wanted to take part there had to make another account. Now there's a demand to have a forum, a wiki and possibly more adjacent services like pasteboard or image/skin upload.

Let's have an oauth2 provider that connects to MT auth DB via SRP. Musthaves:

no plaintext passwords anywhere
Alias can understand what's going on
open source
acts as an oauth2 provider
uses MT auth db as auth source

A possible candidate is this, even though its on docker and currently lacks a license:

https://github.com/minetest-go/mtauth

In the beginning, we only had gitea as a secondary system, whoever wanted to take part there had to make another account. Now there's a demand to have a forum, a wiki and possibly more adjacent services like pasteboard or image/skin upload. Let's have an oauth2 provider that connects to MT auth DB via SRP. Musthaves: * no plaintext passwords anywhere * Alias can understand what's going on * open source * acts as an oauth2 provider * uses MT auth db as auth source A possible candidate is this, even though its on docker and currently lacks a license: https://github.com/minetest-go/mtauth

🎉 1

AliasAlreadyTaken added the

1. kind/other

label 2023-07-08 23:55:13 +00:00

AliasAlreadyTaken added this to the Alias@work project 2023-07-08 23:55:18 +00:00

flux commented

2023-07-09 00:26:47 +00:00

i can take a look at this at some point. i've set up a couple SAML instances (before OAuth existed), and could probably learn what's needed and give advice.

AliasAlreadyTaken commented

2023-08-23 13:54:55 +00:00

This is an example of how SRP can be checked in C

https://github.com/est31/csrp-gmp/blob/master/test_srp.c

There is some weird and old documentation here:

https://doxy.minetest.net/srp_8cpp.html

The minetest dev wiki only has limited info, but still some:

https://dev.minetest.net/Engine/Network_Protocol#Authentication_since_protocol_25

That's how MT does it:

https://github.com/minetest/minetest/blob/master/src/util/srp.h

This si said to be a mt_auth implementation for use by outside services:

https://gitea.your-land.de/your-land/mt_auth

This is an example of how SRP can be checked in C https://github.com/est31/csrp-gmp/blob/master/test_srp.c There is some weird and old documentation here: https://doxy.minetest.net/srp_8cpp.html The minetest dev wiki only has limited info, but still some: https://dev.minetest.net/Engine/Network_Protocol#Authentication_since_protocol_25 That's how MT does it: https://github.com/minetest/minetest/blob/master/src/util/srp.h This si said to be a mt_auth implementation for use by outside services: https://gitea.your-land.de/your-land/mt_auth

Bla commented

2023-08-23 15:34:57 +00:00

That's how MT does it:

https://github.com/minetest/minetest/blob/master/src/util/srp.h

also
https://github.com/minetest/minetest/blob/master/src/util/srp.cpp

> That's how MT does it: > > https://github.com/minetest/minetest/blob/master/src/util/srp.h also https://github.com/minetest/minetest/blob/master/src/util/srp.cpp

flux commented

2023-08-24 01:05:47 +00:00

picking an extensible oath2 provider is probably the first step.