mozilla / moz-ldap Goto Github PK
View Code? Open in Web Editor NEWTHIS IS OBSOLETE! Go see
Home Page: https://github.com/mozilla/medlem
License: BSD 3-Clause "New" or "Revised" License
THIS IS OBSOLETE! Go see
Home Page: https://github.com/mozilla/medlem
License: BSD 3-Clause "New" or "Revised" License
Althought MozLDAP is currently awesome the way Swiss Army knives are awesome, for 1.0, I think it should have a small, focused API.
This API should meet the 80% case of many Mozilla community and internal websites. Effectively this is:
These two API calls could be organized under authorization.
The 1.0 release would be MozLDAP Authorization APIs.
The other features of this repo should be moved into a different branch or deleted. This is needed for security reasons, so that the surface area is small.
Each of these APIs would return a boolean.
These APIs can only be consumed by registered applications as noted in Issue #1.
How will developers request MozLDAP app id and app key?
What information will be required?
Who will say yes or no?
Who will manage these keys?
FYI: The following changes were made to this repository's wiki:
defacing spam has been removed
the wiki has been disabled, as it was not used
These were made as the result of a recent automated defacement of publically writeable wikis.
Mozilla websites which consume the MozLDAP web services should do so in a secure manner.
They should be done of https
They should sign their requests
MozLDAP should verify request signatures, before servicing a request.
Each webapp would have to register the following:
AppID: socorro-123456
Secret: somereallylongsecretwhichwasautogenterated
(I need to play with the real APIs more, bear with me)
If the signature is valid, continue servicing the request. Otherwise respond with a 401 or other relevant HTTP code.
Benefits - Operations can lock down who can use mozLDAP. They can change secret AppIDs and Secret keys as needed.
(Updated: removed my original proposal as HAWK is a better idea)
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.