Consider moving authentication to OAuth2 or accountchooser.com
mdietz opened this issue · comments
OAuth2 is going to be better supported and give us finer grained control over the scopes we're asking for (email and profile scopes).
Accountchooser.com should give us a wrapper that will allow users to authenticate with the big 3-5 identity providers (Google, Facebook, Hotmail, Twitter, Yahoo). See: https://www.accountchooser.com/learnmore.html
Do we care about authenticating with anything other than Google?
We really should. I'd say Twitter / Facebook / Google are the bare minimum of main identity providers to support. Unfortunately they use OAuth1, Facebook Connect, and OAuth2/OpenID respectively so there might be some pain involved in supporting all those protocols.
Why? For instance, we only support Chrome -- no other browsers. What's the compelling reason for supporting a bunch of auth methods?