Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/fluffy-critter/anyauth
An IndieAuth endpoint that will report whatever identity URL you want
https://github.com/fluffy-critter/anyauth
Last synced: 24 days ago
JSON representation
An IndieAuth endpoint that will report whatever identity URL you want
- Host: GitHub
- URL: https://github.com/fluffy-critter/anyauth
- Owner: fluffy-critter
- License: mit
- Created: 2019-11-04T20:29:56.000Z (about 5 years ago)
- Default Branch: master
- Last Pushed: 2024-04-17T03:26:30.000Z (8 months ago)
- Last Synced: 2024-05-01T23:31:04.353Z (8 months ago)
- Language: Python
- Size: 121 KB
- Stars: 3
- Watchers: 2
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# AnyAuth
An IndieAuth endpoint that will report whatever identity URL you want
This is intended for testing the correctness of an IndieAuth client, particularly in handling [differing profile URLs](https://indieauth.spec.indieweb.org/#differing-user-profile-urls).
It should not be used for actually logging into websites beyond testing their conformance.
## Installation
This is a very simple Flask application; please see the [Flask deployment guide](https://flask.palletsprojects.com/en/1.1.x/deploying/) for more information.
## Usage
When prompted to sign in to an IndieAuth client, provide an identity URL that starts with your AnyAuth endpoint; for example if you're running at `https://anyauth.example.com/` you can use an identity URL such as `https://anyauth.example.com/test_user` or the like.
Then when you are prompted for login confirmation, provide whatever "canonical" identity URL you want. If the client implements differing profile URLs correctly, it should accept the canonical URL if and only if it matches that portion of the IndieAuth spec (linked above).
## Test cases
The only logins which succeed should be where the initial profile URL matches the returned `me` URL; for example, `https://anyauth.example.com/foo` should not be able to validate as `https://anyauth.example.com/bar`.
Older versions of the IndieAuth spec allowed any logins with a matching domain succeed (e.g. `https://anyauth.example.com/foo` → `http://anyauth.example.com/bar`) but that is no longer valid, as of [August 11, 2020](https://github.com/indieweb/indieauth/issues/35).