diff --git a/content/docs/contributor/meta.json b/content/docs/contributor/meta.json index d51569a..b89e6dd 100644 --- a/content/docs/contributor/meta.json +++ b/content/docs/contributor/meta.json @@ -10,7 +10,9 @@ "zotistics", "zotmeal", "zotnfound", - "zotmeet" + "zotmeet", + "---Special Projects---", + "unified-auth" ], "root": true } diff --git a/content/docs/contributor/unified-auth/inclusion-exclusion/index.mdx b/content/docs/contributor/unified-auth/inclusion-exclusion/index.mdx new file mode 100644 index 0000000..32916fb --- /dev/null +++ b/content/docs/contributor/unified-auth/inclusion-exclusion/index.mdx @@ -0,0 +1,4 @@ +--- +title: Inclusion & Exclusion +description: Adding and removing projects from Unified Auth. +--- diff --git a/content/docs/contributor/unified-auth/inclusion-exclusion/meta.json b/content/docs/contributor/unified-auth/inclusion-exclusion/meta.json new file mode 100644 index 0000000..bfc1e8b --- /dev/null +++ b/content/docs/contributor/unified-auth/inclusion-exclusion/meta.json @@ -0,0 +1,4 @@ +{ + "title": "Inclusion & Exclusion", + "pages": [] +} diff --git a/content/docs/contributor/unified-auth/index.mdx b/content/docs/contributor/unified-auth/index.mdx new file mode 100644 index 0000000..91a3a82 --- /dev/null +++ b/content/docs/contributor/unified-auth/index.mdx @@ -0,0 +1,29 @@ +--- +title: Unified Auth +description: ICSSC's unified authentication service for all projects. +--- + +Across many of our projects, authentication is a common prerequisite for other features. To bring together our fragmented authentication experince, for both developers and users, Unified Auth allows all projects to easily authenticate users. + +## Core Features + +Unified Auth allows users to sign in with Google OAuth. Only supporting Google OAuth is an intentional decision, as all UCI students to provisioned accounts. We've currently opted not to request access to UCI SSO/Shibboleth to reduce complexity and development time. After sign in, users are redirected through all projects to authenticate them on each domain. This ensures that users are signed into _all_ projects whenever they sign into _any_ project. + +## Architecture + +Unified Auth can be roughly broken down into two parts — handing user verification, and "universal" sign in. More specifically, it is a Hono project running on Cloudflare Workers. + + + + Redirecting to Unified Auth and verifying user identities. + + + Unified Auth's redirect loop mechanism for signing user's into all projects. + + diff --git a/content/docs/contributor/unified-auth/meta.json b/content/docs/contributor/unified-auth/meta.json new file mode 100644 index 0000000..f5b2cd2 --- /dev/null +++ b/content/docs/contributor/unified-auth/meta.json @@ -0,0 +1,5 @@ +{ + "title": "Unified Auth", + "icon": "ScanFace", + "pages": ["inclusion-exclusion"] +}