Is there a way to delegate authentication to a third-party service? #1797
Unanswered
MattiaDellOca
asked this question in
Q&A
Replies: 1 comment 3 replies
-
Solid authentication is based on this spec: https://solidproject.org/TR/oidc, which extends the standard OIDC by adding some fields to the tokens. So a solution completely external to Solid can not be used. There is an upcoming Keycloak extension to support Solid there. It should also be possible to create a module for the CSS that provides a new login method that is based on an existing external solution, but no such thing exists yet, and would be specific to that server. |
Beta Was this translation helpful? Give feedback.
3 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello everyone, I'm a developer and researcher new to Solid.
I'm particularly interested in authentication and identity management. As soon as I started integrating Solid into my project I wondered if there was a way to delegate identity management to a custom third-party service external to Solid (i. e. Auth0, SSI solutions ecc.).
For example, it would be awesome if Solid would give developers the chance to authenticate Solid's user by specifying an endpoint which would return a JWT access token. This token would be passed from frontend to backend at every write request; the backend would contact the authentication service using another endpoint. The authentication service would check if the token was signed with its client_secret, if that was the case it would respond positively.
I'm not sure if this is already a feature, can anyone help me out on this?
Thank you for your help!
Mattia
Beta Was this translation helpful? Give feedback.
All reactions