Supporting user role? about ooth HOT 4 CLOSED

https://github.com/jedireza/aqua/ did a pretty good job. but it's design is not as extensible as ooth.

from ooth.

In principle, why not? The core of ooth is the management of user identity. At the beginning I conceived identity narrowly, as the thing that allows you to authenticate, and things such as profile data (like first and last name) or roles (like "admin") aren't useful for authentication (though roles would be useful for authorization). But now I'm starting to take user identity more generally.
The problem with the more general user identity approach is that that info becomes very application-specific (who gets to be an admin? who gets to define user roles?). Any plugin that provides endpoints to define user roles would require you to define those things anyway. How would you imagine such a role plugin should work?

from ooth.

I haven't try ooth yet, just think about it and there isn't an integrated good framework for user identity, like what ruby have, devise, and others.
recommend following two places to read.
auth0 seems did a very good job on authorization in a commercial sense.

• https://github.com/jedireza/aqua/wiki/Users,-Roles-&-Groups
• https://auth0.com/rules/roles-creation
• https://github.com/plataformatec/devise

In this topic, I would image that there is one special account, who is owner/agent. it can have the power to give/assign to others.

or the plugin may just expose the API to let developer decided what to do with it.

from ooth.

Hey @caoer I was inspired and created a pretty simple roles plugin, here's how to use it:

• server side: https://github.com/nmaro/ooth/wiki#managing-user-roles
• client side: https://github.com/nmaro/ooth/wiki#managing-user-roles-1

Let me know if that helps you.

from ooth.