login for non-Twitter users

[mc2]

Maybe I'm weird, and prefer email/password logins.

Prefer not supporting identity integrations with large corporations.

Will look for that feature in the future. Thanks! Good Luck!

[plpxsk]

I'm wondering (@ team): are there plans to incorporate non-twitter login?

[friedger]

Maybe try blockstack.org ids?

[jalcine]

I'm down to contribute a patch for IndieAuth + IndieLogin.

[CloCkWeRX]

So, the auth controller is via https://github.com/upcoming/upcoming-www/blob/master/controllers/auth.js and passport.

https://www.passportjs.org/

There are many, many strategies; but a few common ones:
https://www.passportjs.org/packages/passport-google-oauth/
https://www.passportjs.org/packages/passport-facebook/
https://www.passportjs.org/packages/passport-mastodon/

I personally would not recommend Facebook, as they have a bullshit app review process where they attempt to dictate what your application does; while feasting on the user data.

The main friction here is setting up the API keys for all of these providers, which is a bunch of hoops to jump through.

https://www.passportjs.org/packages/passport-indieauth/ is marked as "not ready"

[CloCkWeRX]

Other considerations:

• Account link or merge when multiple auth is used, to avoid duplicates but also avoid account take over
• https://github.com/jwalton/passport-api-docs?tab=readme-ov-file#passportauthorizestrategyname-options-callback appears to be the thing to look at