auth

Paddy 2015-04-11 Parent:e45bfa2abc00

158:3223a8e679db Go to Latest

auth/doc.go

Remove concept of usernames. We really have no reason to use usernames, and they're complicating things more than they need to. We're going to keep logins the same, because we want to be able to support OAuth2/OpenID/whatever logins in the future, and keeping a type associated with those logins is probably for the best.

Download raw file
View source Diff to previous Annotate
History 
     1.1 --- a/doc.go	Sat Apr 11 14:13:52 2015 -0400
     1.2 +++ b/doc.go	Sat Apr 11 14:39:51 2015 -0400
     1.3 @@ -3,9 +3,8 @@
     1.4  
     1.5  The service is an opinionated implementation of authentication using passphrases and the
     1.6  code.secondbit.org/pass package to implement user credentials and accounts. Additionally, users
     1.7 -are permitted to login using their email address on record or their username interchangeably.
     1.8 -Care is also taken to be able to mitigate attacks that have already happened and plan ahead for
     1.9 -the worst case scenarios.
    1.10 +are permitted to login using any email address they have on record. Care is also taken to be able
    1.11 +to mitigate attacks that have already happened and plan ahead for the worst case scenarios.
    1.12  
    1.13  An OAuth2 provider is also built-in and provided, complete with client registration and management,
    1.14  as well as a specification-based set of handlers for managing the issuing of grants and tokens. Token