Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Persona makes signing in easy for Gmail users

identity.mozilla.com

Post reply on HN
Print view View original

61–70 of 122 posts

Re: Persona makes signing in easy for Gmail users

#61

Post by Skalman »

trimbo wrote: post #53
Skalman wrote: post #20

The only bad thing with this new Gmail integration is that it gets more annoying if you have multiple Gmail accounts, or aren't logged in to the Gmail account you want to use. And some things, like using myname+website@gmail.com doesn't work at all.

I highly recommend using Chrome's multiple user feature to log into your separate gmail accounts. This is the only thing that has kept me sane at the last couple companies where we used Google Apps.

I use Firefox... and I don't think I wan't to be logged into multiple accounts - it's just that now Persona requires it.

Re: Persona makes signing in easy for Gmail users

#62

Post by berekuk »

NDizzle wrote: post #58

This seems like it just adds another click for gmail/yahoo users? I don't understand. Added another step to the login process and I think I'll have to change around some of my javascript to prevent returning users from "magically" authenticating after Persona gets around to authenticating them. Weird. Oh well. Can't bitch much with a free service can I?

They replaced the step where you had to enter your "Persona password" with one click confirming your gmail credentials to Persona. You have to do it just once.

(And not even once per website, just once in a lifetime.)

Re: Persona makes signing in easy for Gmail users

#63

Post by StavrosK »

NDizzle wrote: post #58

This seems like it just adds another click for gmail/yahoo users? I don't understand. Added another step to the login process and I think I'll have to change around some of my javascript to prevent returning users from "magically" authenticating after Persona gets around to authenticating them. Weird. Oh well. Can't bitch much with a free service can I?

This makes it so gmail users don't need yet another password to log in to Persona-enabled sites. It effectively turns Persona into a superset of "login with Google".

Re: Persona makes signing in easy for Gmail users

#64

Post by StavrosK »

ozten wrote: post #57
jeena wrote: post #56

Earlier quoted context omitted.

I want to be my own identity provider, which ever web technology, php, ruby, python, JavaScript.

This is a NodeJS personal project that I use to host my identity: https://github.com/ozten/hostedpersona https://ozten.com/.well-known/browserid (a static website) delegates to https://hostedpersona.me/.well-known/browserid which I run on an ec2 instance. This clearly isn't as polished as aptitude install, but feel free to fork and play.

I wrote a service so you don't have to do any of that: https://persowna.net/

Just add the .well-known file to your site, and that's it.

EDIT: Actually, I might just open-source this and keep the hosted version for people who want convenience.

Re: Persona makes signing in easy for Gmail users

#65

Post by StavrosK »

callahad wrote: post #55
jvehent wrote: post #52

Earlier quoted context omitted.

I run my own mail server. Linux + Postfix + Dovecot. The standard stuff. How do I enable Persona on user@example.net ?

Check out the docs under the "Identity Providers" heading here: https://developer.mozilla.org/en-US/docs/Mozilla/Persona Shane Tomlinson and I gave a talk about turning your own domain into a Identity Provider at FOSDEM this year, which might be helpful: https://www.youtube.com/watch?v=0YRq9LWnlBw Also, if you'd like to source dive: - Minimal, static, Mailinator-style IdP: https://github.com/callahad/mockmyid/ - Mini…

As I mentioned below, I also wrote a service to turn your domain into an identity provider (so you can log in with you@yourdomain.com): https://persowna.net/

It's free for now, and will probably always be free for individual usage.

Re: Persona makes signing in easy for Gmail users

#67

Post by seanmonstar »

jeena wrote: post #56
ozten wrote: post #46

Earlier quoted context omitted.

Tell me more! Do you want Persona authentication on your website or do you want a deamon that is an identity provider for your personal domain? What language or platform would be ideal?

I want to be my own identity provider, which ever web technology, php, ruby, python, JavaScript.

Whichever technology you want to use is fine. You need to publish 3 routes: /.well-known/browserid, an auth route, and a provision route.

The auth and provision routes need to be HTML pages that authenticate you however you want, and then sign a certificate with your key that you publish the .well-known file.

Here's how we did it for Gmail: https://github.com/mozilla/browserid-sideshow/blob/master/bi...

Re: Persona makes signing in easy for Gmail users

#68

Post by callahad »

StavrosK wrote: post #64
ozten wrote: post #57

Earlier quoted context omitted.

This is a NodeJS personal project that I use to host my identity: https://github.com/ozten/hostedpersona https://ozten.com/.well-known/browserid (a static website) delegates to https://hostedpersona.me/.well-known/browserid which I run on an ec2 instance. This clearly isn't as polished as aptitude install, but feel free to fork and play.

I wrote a service so you don't have to do any of that: https://persowna.net/ Just add the .well-known file to your site, and that's it. EDIT: Actually, I might just open-source this and keep the hosted version for people who want convenience.

Dude, that's awesome! I didn't know you were ready to accept sign-ups. Will try to mention it more often. :)

Re: Persona makes signing in easy for Gmail users

#69

Post by StavrosK »

callahad wrote: post #68
StavrosK wrote: post #64

Earlier quoted context omitted.

I wrote a service so you don't have to do any of that: https://persowna.net/ Just add the .well-known file to your site, and that's it. EDIT: Actually, I might just open-source this and keep the hosted version for people who want convenience.

Dude, that's awesome! I didn't know you were ready to accept sign-ups. Will try to mention it more often. :)

Man I told you about it like three times on IRC (and that was your response then, too)! :P

It's still early-stage, but it works very well for plain authentication. Next step is two-factor auth.

Re: Persona makes signing in easy for Gmail users

#70

Post by joyeuse6701 »

callahad wrote: post #49
joyeuse6701 wrote: post #48

So...that means instead of someone knowing my password to get into xyz website, they can easily just use persona which in a few clicks will let them into my account?

Sure, if they're logged into your Gmail account at the same time. At which point it's already game over. :)

Touche sir.
Post reply on HN