[dokuwiki] Re: OAuth plugin & auth.php patch

Hi,

> I ventured out to write an http://oauth.net/ plugin for dokuwiki: A user
> authorizes an oAuth-token[..], which can later be used by a consumer to
> perform requests on behalf of the user.
>
> see http://mir.dnsalias.com/wiki/dokuoauth for details, source and examples.

This looks great. Unfortunately I'm not familiar enough with how oauth
works to say anything about the code yet.

> In it's current state it implements an OAuth service-provider, the oAuth
> plugin authenticates HTTP-GET, -POST and XML-RPC(!) requests to dokuwiki
> according to oAuth Core 1.0 spec against a dokuwiki auth-backend. What's
> missing is a nicer user/admin interface and integration with dokuwiki.

Can you elaborate a bit what this should look like and what user
interfaces are needed?

> To hook into dokuwiki authentication on a per request basis a new
> Doku_Event 'ACTION_ON_AUTH' has been introduced to ''inc/auth.php''.
>
> I pragmatically helped myself with a small patch, but would appreciate
> information, if the same can be achieved without modifying dokuwiki or
> if the attached diff can be merged into dokuwiki-devel.

I was prepared to say that this could be done with a custom auth
backend but then saw on your documentation page that you considered
this already. I think I can follow your argumentation and if nobody
disagrees I'd add your event.

> Implementing an oAuth Consumer (sign outgoing requests - eg. {{rss>}}
> extern-includes or picture-aggregation,..) seems to be limited to
> specific plugins.  To implement this properly, dokuwiki would need to
> add a dedicated function for outgoing HTTP requests that can be hooked
> into. What do you think? Does that seem to be a reasonable
> feature-request for later dokuwiki versions?

DokuWiki already has it's own HTTP client library that is used for all
outgoing HTTP requests. Check the HTTPClient.php file. What would be
needed to add oauth support there and what could one do with it?

Andi

-- 
splitbrain.org
-- 
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist

Other related posts: