Hacker News Reader

Comment by ozten | Hacker News Reader

Tell me more!

Do you want Persona authentication on your website or do you want a deamon that is an identity provider for your personal domain?

What language or platform would be ideal?

View on HN

I have to use different computers throughout the day and I use Lastpass to manage passwords on my laptop. It would be awesome if there were a WordPress plugin that would allow users/admin to log-in using Persona/Gmail. That way when I am already logged in to my gmail I can use Persona/Gmail to log into my wordpress account and resume writing.

UPDATE:- There is a plugin like that http://wordpress.org/plugins/browserid/ . Too bad it doesn't work with Google Apps.

I run my own mail server. Linux + Postfix + Dovecot. The standard stuff. How do I enable Persona on user@example.net ?

Check out the docs under the "Identity Providers" heading here: https://developer.mozilla.org/en-US/docs/Mozilla/Persona

Shane Tomlinson and I gave a talk about turning your own domain into a Identity Provider at FOSDEM this year, which might be helpful: https://www.youtube.com/watch?v=0YRq9LWnlBw

Also, if you'd like to source dive:

- Minimal, static, Mailinator-style IdP: https://github.com/callahad/mockmyid/

- Minimal standalone IdP: https://github.com/mozilla/eyedee.me/

- Mozilla Employee (LDAP) IdP: https://github.com/mozilla/vinz-clortho

- GMail Bridge: https://github.com/mozilla/browserid-sideshow

And there's a Drupal module: https://drupal.org/project/browserid_idp

As I mentioned below, I also wrote a service to turn your domain into an identity provider (so you can log in with you@yourdomain.com): https://persowna.net/

It's free for now, and will probably always be free for individual usage.

Your service is nice, but the whole point of my question was to have to a simple way to install something that could make me independent of any 3rd-party service like yours. :)

Oh. Then, what the other posters said :P

Here's another one:

There's a couple of posts on meta.discourse.org asking how to integrate Discourse with an existing Single Sign On (assume all users have email addresses)

With Persona on a LAN-side server, you could even have emails like janesmith@intranet.local and it'd still be seamless.

I want to be my own identity provider, which ever web technology, php, ruby, python, JavaScript.

This is a NodeJS personal project that I use to host my identity: https://github.com/ozten/hostedpersona

https://ozten.com/.well-known/browserid (a static website) delegates to https://hostedpersona.me/.well-known/browserid which I run on an ec2 instance.

This clearly isn't as polished as aptitude install, but feel free to fork and play.

I wrote a service so you don't have to do any of that: https://persowna.net/

Just add the .well-known file to your site, and that's it.

EDIT: Actually, I might just open-source this and keep the hosted version for people who want convenience.

Side note, Your font differs on https://persowna.net/pricing/ and https://persowna.net/ for the logotype.

Awesome job on the site!

Oops, good catch! Thanks!

EDIT: This is really odd, it's the exact same HTML/CSS, yet a different typeface. Weird.

EDIT 2: It would help if I had actually included the font in the header. Thanks again :)

Dude, that's awesome! I didn't know you were ready to accept sign-ups. Will try to mention it more often. :)

Man I told you about it like three times on IRC (and that was your response then, too)! :P

It's still early-stage, but it works very well for plain authentication. Next step is two-factor auth.

Alright, promise: next month we'll blog about becoming an identity provider, and I'll highlight Persowna, the Drupal module, djc's persona-totp library, etc.

Awesome, thanks! I'll work on getting two-factor auth on it, hopefully it will be done by then.

Whichever technology you want to use is fine. You need to publish 3 routes: /.well-known/browserid, an auth route, and a provision route.

The auth and provision routes need to be HTML pages that authenticate you however you want, and then sign a certificate with your key that you publish the .well-known file.

Here's how we did it for Gmail: https://github.com/mozilla/browserid-sideshow/blob/master/bi...

I wrote a blog post about implementing an IdP from scratch in Python. (Uses Django, but the lessons should be transferable). https://lukasa.co.uk/2013/04/Writing_A_Persona_Identity_Prov...

Reply on news.ycombinator.com