Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP

Loading…

Make it possible to use multiple back-ends simultaneously #343

Open
csillag opened this Issue · 1 comment

4 participants

@csillag
Collaborator

Either by allowing multiple sign-ins, or some other way.

For details, see here:

https://github.com/hypothesis/h/wiki/Using-several-instances-of-H-simultaneously

@tilgovi
Owner

"Constraint: this approach requires all simultaneously accessed back-ends to to use the same protocol and (by extension) the same code. Ideally, we would like to make it possible for any community to run their own for of Hypothes.is (backend, frontend, whatever.)"

I believe this statement is false or overblown. The login is currently done inline, in the sidebar. I dislike this because it:

  • Dictates the protocol for sign-in and account management
  • Asks for sensitive input in a place where the location bar and SSL status of the frame is not visible

If that issue is removed (e.g., by implementing our sign-in by creating a BrowserID identity provider for @hypothes.is), then we would have a demonstrated ability to support arbitrary custom login flows and the client would only need to get the token back from the flow. The annotator-store API would have to change to accept these tokens instead of the current system. However, beyond that, the store API is something that we should promote, stabilize, and standardize, and I think it's acceptable that all backends would understand it.

@dwhly dwhly added the 1 - Backlog label
@dwhly dwhly referenced this issue in hypothesis/vision
Open

Multiple Authorizations #29

2 of 3 tasks complete
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.