IssueRaiser

Allow Mastodon to be used as an OpenID provider

Nowadays, a lot of website allow their users to log in by using their Facebook, Twitter or Google+ account. User-wise, one of the advantages of doing so is to be allowed to use a lot of different websites using the same password everywhere. However, using centralized and company owned website like those ones as identity provider is not without any risk. [OpenID](https://openid.net/) is an open standard and decentralized authentication protocol allowing users to log into a website using a third party provider of their choice. It works over OAuth 2.0 and has been finalized three years ago. It is deployed but not widely used yet, shadowed by the big centralized social networks. My assumption is that the main obstacle to its adoption is that many OpenID implementations don't provide any useful service beside acting as an identity provider unlike Facebook and Twitter. I suggest we add OpenID support to Mastodon. By doing so, we'll allow anyone with a Mastodon account to log in to any website using this protocol. It'll add to Mastodon a missing feature viewed as essential by some, and could encourage webmasters to implement this feature in a near future. References: - [OpenID Connect specifications](https://openid.net/connect/) - [RFC 6749](https://tools.ietf.org/html/rfc6749) * * * * - [x] I searched or browsed the repo’s other issues to ensure this is not a duplicate.

Posted by Sylvhem on Sep 4, 2017, 12:40 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.4,500 issues0 comments

support (Other)

Allow Mastodon to be used as an OpenID provider

SylvhemSep 4, 2017, 12:40 AM

Nowadays, a lot of website allow their users to log in by using their Facebook, Twitter or Google+ account. User-wise, one of the advantages of doing so is to be allowed to use a lot of different websites using the same password everywhere. However, using centralized and company owned website like those ones as identity provider is not without any risk. [OpenID](https://openid.net/) is an open standard and decentralized authentication protocol allowing users to log into a website using a third party provider of their choice. It works over OAuth 2.0 and has been finalized three years ago. It is deployed but not widely used yet, shadowed by the big centralized social networks. My assumption is that the main obstacle to its adoption is that many OpenID implementations don't provide any useful service beside acting as an identity provider unlike Facebook and Twitter. I suggest we add OpenID support to Mastodon. By doing so, we'll allow anyone with a Mastodon account to log in to any website using this protocol. It'll add to Mastodon a missing feature viewed as essential by some, and could encourage webmasters to implement this feature in a near future. References: - [OpenID Connect specifications](https://openid.net/connect/) - [RFC 6749](https://tools.ietf.org/html/rfc6749) * * * * - [x] I searched or browsed the repo’s other issues to ensure this is not a duplicate.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue