OAuth login [WIP]

[stefankoegl]

Decouple gpodder.net's authentication from the application itself. This would allow other applications (eg podcast clients) to authenticate against the same source, and would also help to decouple gpodder.net into smaller components (eg a directory, subscription service, etc).

mygpo-auth functional OAuth service.

TODO

• implement registration flow
• move / copy users to an instance of mygpo-auth
• Tests
• more?

[coveralls]

Coverage increased (+0.03%) to 46.431% when pulling 2e4a931 on oauth-login into 5cd52a5 on master.

[SiqingYu]

The mygpo-auth implements OAuth by itself. I was wondering why not use a library like oauthlib? Security concerns could be delegated to the library instead of us.

I plan to introduce DRF in the future. I think the oauthlib integration could be helpful.

[stefankoegl]

The mygpo-auth implements OAuth by itself. I was wondering why not use a library like oauthlib?

To be honest, I can't remember.

Security concerns could be delegated to the library instead of us.

Absolutely.