@geant@mstdn.social🌐 eduGAIN piloting use of OpenID Federation
eduGAIN has relied on SAML for years, but modern protocols like OpenID Connect 1.0 & OAuth 2.0 are now industry standards.
The eduGAIN service is running a 12-month pilot to test how OpenID Federation could be used as the future trust technology for eduGAIN, alongside SAML.
🔗 Read more in the latest #CONNECT50 article by Lars Fugl…
@azonenberg@ioc.exchangeRandom thought: the centralization of authentication to a few big OAuth providers like MS and Google, combined with services that time out your cookies and force relogins every so often, makes phishing people so much easier.
Want someone's account creds? Just pop up something that looks like a ms or google login form, odds are they're so conditioned by login fatigue that they'll automatically type their creds and TOTP token into it.
@daniel@social.telemetrydeck.comYou’ve heard of App Store Review, but have you heard about the 4-6 weeks waiting period for Google to review your Oauth App for Sign In With Google? 🤡
@aral@mastodon.ar.alHey everyone,
Gaza Verified is now open again for verification calls in 2026.
The new process for signing up for verification calls uses sign in with Mastodon and should remove the last remaining technical hurdle that was giving some of our friends in Gaza a hard time (adding the verification link to your Mastodon account is not intuitive in the current Mastodon interface). With this new flow, you won’t have to, we do it for you.
@dde@social.tchncs.deIch habe gestern einmal feed2toot durch den Fork feed2toot-oauth ersetzt. Das ist ein Drop-In-Replacement, das ursprüngliche Projekt steht seit 2021 still.
https://pypi.org/project/feed2toot/
@aral@mastodon.ar.alJust added a “Sign in with Mastodon” example to Kitten’s¹ examples:
https://codeberg.org/kitten/app/src/branch/main/examples/sign-in-with-mastodon
If I have time at some point, I might make it into a tutorial.
Enjoy!
:kitten:💕
