Authenticate administrators via OAuth

[lfaraone]

It'd make the {de,}provisioning process a lot easier if administrators could sign in via OAuth (developer documentation).

There're reference implementations for PHP, including examples that securely retrieve the user's group. This would also have the advantage of automatically revoking UTRS access to former administrators.

[lfaraone]

I haven't written a good deal of PHP, but might take a stab at this over the weekend.

[dqwiki]

Any help is appreciated. If you need help understanding anything, let me know.

[dqwiki]

To do list

• Initial coding
• Setup OAuth Consumer (https://en.wikipedia.org/wiki/User_talk:Anomie#OAuth)
• Verify database and interface did not break with new users
• Verify database and interface did not break with existing users
• Modify coding to allow for assigned roles to match onwiki groups (while allowing tool assigned roles)
• Final integration testing

Bonus:

• OAuth non-repetitive authorization requests OAuth non-repetitive authorization requests #114