René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"WebID-OIDC authn (minimum demo features)","articleBody":"### MVP demoable feature set\r\n\r\nTest implementation of OIDC-based signup and signin has been deployed to: https://databox2.com\r\n\r\nSee also: [PR #330/`dz_oidc` branch](https://github.com/solid/node-solid-server/pull/330) for work in progress.\r\n\r\nRemaining items:\r\n#### Solid-server\r\n- [x] Convert 401 Unauthorized error page to use the signin/Discovery app.\r\n- [x] Provider discovery by entering WebId (e.g. `https://alice.databox.me/profile/card#me`)\r\n- [x] User signup (creating the OIDC user with password on regular account creation)\r\n- [x] User signin using WebId \u0026 password\r\n- [x] Sign in by entering account id (e.g. `alice`) \u0026 pw\r\n- [ ] Sign in by entering email \u0026 pw\r\n- [x] Receive ID Token and Access Token at the end of the authenticate() dance.\r\n- [x] Integrate access token parsing into RS or solid server\r\n- [x] Integrate OIDC config generation into `solid init`\r\n- [x] Implement `/signout` api endpoint (clears session cookie, sends signout request to OIDC provider)\r\n- [ ] Provider discovery by entering email (WebFinger / WebFist integration)\r\n\r\n#### General/Design\r\n- [ ] Design model/workflow for multi-domain authorization - see [solid/solid#99](https://github.com/solid/solid/issues/99)\r\n\r\n#### `solid-client` (client lib support)\r\n- [x] Refactor existing WebID-TLS based code into separate pluggable library - see [solid-client#91](https://github.com/solid/solid-client/issues/91)\r\n- [x] Add support for oidc authentication - see [solid.js#92](https://github.com/solid/solid-client/issues/92)\r\n\r\n##### solid-auth-oidc\r\nCreate a separate OIDC authentication lib for `solid-client` to use. (see [`solid-auth-oidc`](https://github.com/solid/solid-auth-oidc))\r\n- [x] Add OIDC support for the `signin()` function. see [solid-auth-oidc#1](https://github.com/solid/solid-auth-oidc/issues/1)\r\n- [x] Add ability to store OIDC Id Tokens client-side (in local storage etc) and send them along with web client CRUD API requests. see [solid-auth-oidc#2](https://github.com/solid/solid-auth-oidc/issues/2)\r\n- [x] Implement Signup support (workflow deposits user back into the app, authenticated). see [solid-auth-oidc#4](https://github.com/solid/solid-auth-oidc/issues/4)\r\n- [x] Implement OIDC `signout()` capability. see [solid-auth-oidc#3](https://github.com/solid/solid-auth-oidc/issues/3)\r\n#### External solid apps\r\n- [x] Revamped Solid signup app - see [`solid/solid-signup-ui`](https://github.com/solid/solid-signup-ui/)\r\n- [x] Revamped Solid signin app\r\n- [ ] Authorize app (to sign into 3rd parties) - see [`solid/solid-authorization-ui`](https://github.com/solid/solid-authorization-ui)\r\n\r\n","author":{"url":"https://github.com/nicola","@type":"Person","name":"nicola"},"datePublished":"2016-05-13T23:11:27.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":9},"url":"https://github.com/353/node-solid-server/issues/353"}