Username/Password Authentication?

[tylerstillwater]

Would Username/Password authentication be something we want in goth?

[markbates]

I've thought about it, but not sure how you'd go about it. Could probably implement basic http auth, but db driven would be a lot harder.

[tylerstillwater]

Right.. goth shouldn't care about the DB in any way. If anything, we'd need a callback function the calling code uses to do DB work for us.

[tylerstillwater]

I'm not sure user/pass makes much sense in terms of goth, though. It really is architected for oauth flows.

[markbates]

Sorry, I've been away for the last few days. I'm going to close this, for now. I agree I think it would be a of a shoehorn to get it in.

Let's keep in the back of our minds and if a solution pops in then we can re-open.

[digitalplaywright]

https://github.com/simplabs/rails_api_auth is a rails example for supporting the "Resource Owner Password Credentials Grant" OAuth 2.0 flow as well as Facebook authentication. It is extremely simple and not many lines of code, and hopefully this can be made into an equivalent. However, the scope of this package is for APIs with bearer tokens only and not for cookie based sessions.

[lucagez]

This PR #506 can add support for the Password Grant flow