Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of jason.h.smith@gmail.com
 designates 209.85.214.170 as permitted sender)
MIME-Version: 1.0
Sender: jason.h.smith@gmail.com
In-Reply-To: 
 <CAD2UGCXgOjmKvTLJFrQjhu5f675Lm10+WMBN-cn0kdMP=5-JaA@mail.gmail.com>
References: 
 <CACLy94XiKgjsZibTn5Mb5GKByH-3=yH5t-yOd+Ez_A+Dp3buaA@mail.gmail.com>
 <CAHdjipKB_DkkJnhUvTNQd58a5xuAm6zCHifdpTCmyrRewSAjfQ@mail.gmail.com>
 <CACLy94VFt-qXGTWXBvAWMw-TrPYsmrDeaovaQwCX5GCtppKDZQ@mail.gmail.com>
 <278988D5-8E9C-46C0-BD39-A1AA28C6B15D@sri.com>
 <CACLy94WttB2ye3WEf2qKv6R3fMH=DCHigkwDQUzayvS_Mg7pNA@mail.gmail.com>
 <CAKmKYaCL2gtyh1XfW4g1YYjBKv44eE0+50-gysHjUZfyeKEs+A@mail.gmail.com>
 <CACLy94VJZ53ywoh+suf1+ThnS1oPgwFAzzQVrEKtiW7cE_zhhw@mail.gmail.com>
 <CAKmKYaDw75xPO99=ubc-hnTh=Kfj+Tc+N2y8iujzz5NOFbqdtA@mail.gmail.com>
 <CACLy94Wzpdnz35gFN+ZKhBAR4SeigE3KFC=q0sX=zBPZ11offA@mail.gmail.com>
 <CAD2UGCXgOjmKvTLJFrQjhu5f675Lm10+WMBN-cn0kdMP=5-JaA@mail.gmail.com>
From: Jason Smith <jhs@apache.org>
Date: Mon, 29 Jul 2013 23:07:47 +0700
Message-ID: 
 <CACLy94WNzkR-2STrfdmJgWnCjn+zdUrf1kQH45dO9mvNQ+04Zg@mail.gmail.com>
Subject: Re: Persona and BrowserID integration
To: "dev@couchdb.apache.org" <dev@couchdb.apache.org>
Content-Type: text/plain; charset=UTF-8

This is an interesting argument.

Dale, what do you think about the value of "official" Persona support
in CouchDB, versus the possibility that it becomes a plugin "killer
app" or at least a decent reference implementation?

The plugin has existed for a while; however it has gotten very little
use, in part because the whole concept of a plugin is ill-defined and
brittle. You need to set ERL_ZFLAGS to activate it, to say nothing of
compiling.

Also, note that I also plan to merge the OAuth plugin. Something I
could see being a plugin indefinitely is couchdb_pingquery, although
the state of the plugin system is still extremely anemic.

On Mon, Jul 29, 2013 at 10:24 PM, Dale Harvey <dale@arandomurl.com> wrote:
> On the topic of browser_id support in CouchDB, it feels like this is a big
> chance to push for usable plugins, should the aim for this not to be
> included into core but to be available as a one click install from
> futon/fauxton (this and geocouch seem prime candidates)?
>
> This isnt because I dont want browser_id support, I most definitely do, I
> recently wrote a node equivalent to Jasons browser_id plugin for the only
> reason that it would be easier for users to install / use on their local
> CouchDB instance.
>
> But we have a problem of support for anything 3rd party needing to be
> merged to core to be usable which is very much conflicting with peoples
> ability to get stuff done, the browser_id / geocouch and cors support have
> been around a long time but are mostly only available to the dedicated few
> (cors did eventually get merged), I would love to see a couchdb where the
> browser_id plugin was available to all users of couchdb the day you
> finished writing it, not (3?) years later
>
>
>
> On 29 July 2013 11:26, Jason Smith <jhs@nodejitsu.com> wrote:
>
>> Perfect, that is exactly what I will need. However, the first
>> milestone is rewrite my plugin in a branch, and hit the first
>> milestone.
>>
>> On Mon, Jul 29, 2013 at 5:19 PM, Dirkjan Ochtman <dirkjan@ochtman.nl>
>> wrote:
>> > On Mon, Jul 29, 2013 at 12:02 PM, Jason Smith <jhs@nodejitsu.com> wrote:
>> >> To clarify, "tinfoil hat" mode is actually just a complete
>> >> implementation of the RP role, notably that it does not require the
>> >> POST to browserid.org/verify to verify an assertion. Thus, CouchDB
>> >> could be used on an intranet where an existing IdP exists. The IdP is
>> >> out of scope, but I expect to install one to test CouchDB when that
>> >> time comes.
>> >
>> > This might be useful inspiration: https://bitbucket.org/djc/persona-totp
>> .
>> >
>> > Cheers,
>> >
>> > Dirkjan
>>
>>
>>
>> --
>> Nodejitsu
>>