Use Persona for user auth now, SBHX DBs later

[elimisteve]

Persona is a privacy-respecting "sign-in system for the web" created by Mozilla.

Persona Go library: https://github.com/sauerbraten/persona

(API auth will use auth tokens.)

Later it'd be sweet to integrate with either (1) the (WordPress-owned) MySQL DB at sbhackerspace.com, or (2) the MySQL DB in the 'space that interfaces with the RFID card reader.

[ptone]

I love persona, but: https://news.ycombinator.com/item?id=7364465

[elimisteve]

@ptone From that link: "It's true that we spent effort trying to make Persona work for Firefox OS, and that effort did not result in a fantastic on-device experience. Sign-in to web? Yes. Sign-in to device? Not so much. ... ...I believe we made the right call and let Persona focus on its core value prop - sign-in to the web with a verified email."

We're talking about using it for web authentication, which is a use case that even this guy thinks was nailed well, so I think we're in good shape.

[elimisteve]

...as long as the HTTPS and DNSSEC requirements aren't too arduous. I'll read into it more; we'll see.

[elimisteve]

Actually looks simple: https://developer.mozilla.org/en-US/Persona/Quick_Setup