Skip to content


Subversion checkout URL

You can clone with
Download ZIP


Make it possible to use multiple back-ends simultaneously #343

csillag opened this Issue · 1 comment

4 participants


Either by allowing multiple sign-ins, or some other way.

For details, see here:


"Constraint: this approach requires all simultaneously accessed back-ends to to use the same protocol and (by extension) the same code. Ideally, we would like to make it possible for any community to run their own for of (backend, frontend, whatever.)"

I believe this statement is false or overblown. The login is currently done inline, in the sidebar. I dislike this because it:

  • Dictates the protocol for sign-in and account management
  • Asks for sensitive input in a place where the location bar and SSL status of the frame is not visible

If that issue is removed (e.g., by implementing our sign-in by creating a BrowserID identity provider for, then we would have a demonstrated ability to support arbitrary custom login flows and the client would only need to get the token back from the flow. The annotator-store API would have to change to accept these tokens instead of the current system. However, beyond that, the store API is something that we should promote, stabilize, and standardize, and I think it's acceptable that all backends would understand it.

@dwhly dwhly added the 1 - Backlog label
@dwhly dwhly referenced this issue in hypothesis/vision

Multiple Authorizations #29

2 of 3 tasks complete
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.