Enable atSign based log in to web based applications
VJag opened this issue · comments
Is your feature request related to a problem? Please describe.
Very similar to "Open ID / OAuth" atProtocol can enable "password-less login" and "identity exchange" with web-based applications.
The objective of this task is to accomplish the above.
Describe the solution you'd like
-
Develop a java library that helps with @login functionality [Completed]
The library will have two functionalities
- Generate an authentication cookie
- Verify if the authentication cookie is present -
Unit tests and code review
-
Demonstrate usage of the Java library [Completed]
Updated list of tasks [Aug 7, 2023]
- Develop a database-backed rest service
- Update Readme's
- Use a cram-like string instead of UUID for the authentication token
- Use signature verification for the auth token while verifying
- Add qr_code which can be scanned to authenticate ?
@srieteja checked-in the Java library.
Pending tasks in this task are:
- Check-in nodes js demo app in an appropriate git repo
- Code review
Is this still being actively worked on?
All the necessary code has been introduced into https://github.com/atsign-foundation/at_login/tree/master
Reopening ticket with updated list of tasks
Could not work on this in PR68, carrying it forward to PR69
Could not work on this as we are getting APKAM to the finish line. Carrying this forward to PR71.
Started working on it, will continue working on it in the next sprint. Carrying it forward to PR75.
Most of the implementation has been completed, fixing minor issues with signature verification. Carrying forward to PR76 to complete the implementation, testing and review.