Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Tell me more!

Do you want Persona authentication on your website or do you want a deamon that is an identity provider for your personal domain?

What language or platform would be ideal?



I run my own mail server. Linux + Postfix + Dovecot. The standard stuff. How do I enable Persona on user@example.net ?


Check out the docs under the "Identity Providers" heading here: https://developer.mozilla.org/en-US/docs/Mozilla/Persona

Shane Tomlinson and I gave a talk about turning your own domain into a Identity Provider at FOSDEM this year, which might be helpful: https://www.youtube.com/watch?v=0YRq9LWnlBw

Also, if you'd like to source dive:

- Minimal, static, Mailinator-style IdP: https://github.com/callahad/mockmyid/

- Minimal standalone IdP: https://github.com/mozilla/eyedee.me/

- Mozilla Employee (LDAP) IdP: https://github.com/mozilla/vinz-clortho

- GMail Bridge: https://github.com/mozilla/browserid-sideshow

And there's a Drupal module: https://drupal.org/project/browserid_idp


As I mentioned below, I also wrote a service to turn your domain into an identity provider (so you can log in with you@yourdomain.com): https://persowna.net/

It's free for now, and will probably always be free for individual usage.


Your service is nice, but the whole point of my question was to have to a simple way to install something that could make me independent of any 3rd-party service like yours. :)


Oh. Then, what the other posters said :P


I have to use different computers throughout the day and I use Lastpass to manage passwords on my laptop. It would be awesome if there were a WordPress plugin that would allow users/admin to log-in using Persona/Gmail. That way when I am already logged in to my gmail I can use Persona/Gmail to log into my wordpress account and resume writing.

UPDATE:- There is a plugin like that http://wordpress.org/plugins/browserid/ . Too bad it doesn't work with Google Apps.


Here's another one:

There's a couple of posts on meta.discourse.org asking how to integrate Discourse with an existing Single Sign On (assume all users have email addresses)

With Persona on a LAN-side server, you could even have emails like janesmith@intranet.local and it'd still be seamless.


I want to be my own identity provider, which ever web technology, php, ruby, python, JavaScript.


This is a NodeJS personal project that I use to host my identity: https://github.com/ozten/hostedpersona

https://ozten.com/.well-known/browserid (a static website) delegates to https://hostedpersona.me/.well-known/browserid which I run on an ec2 instance.

This clearly isn't as polished as aptitude install, but feel free to fork and play.


I wrote a service so you don't have to do any of that: https://persowna.net/

Just add the .well-known file to your site, and that's it.

EDIT: Actually, I might just open-source this and keep the hosted version for people who want convenience.


Side note, Your font differs on https://persowna.net/pricing/ and https://persowna.net/ for the logotype.

Awesome job on the site!


Oops, good catch! Thanks!

EDIT: This is really odd, it's the exact same HTML/CSS, yet a different typeface. Weird.

EDIT 2: It would help if I had actually included the font in the header. Thanks again :)


Dude, that's awesome! I didn't know you were ready to accept sign-ups. Will try to mention it more often. :)


Man I told you about it like three times on IRC (and that was your response then, too)! :P

It's still early-stage, but it works very well for plain authentication. Next step is two-factor auth.


Alright, promise: next month we'll blog about becoming an identity provider, and I'll highlight Persowna, the Drupal module, djc's persona-totp library, etc.


Awesome, thanks! I'll work on getting two-factor auth on it, hopefully it will be done by then.


Whichever technology you want to use is fine. You need to publish 3 routes: /.well-known/browserid, an auth route, and a provision route.

The auth and provision routes need to be HTML pages that authenticate you however you want, and then sign a certificate with your key that you publish the .well-known file.

Here's how we did it for Gmail: https://github.com/mozilla/browserid-sideshow/blob/master/bi...


I wrote a blog post about implementing an IdP from scratch in Python. (Uses Django, but the lessons should be transferable). https://lukasa.co.uk/2013/04/Writing_A_Persona_Identity_Prov...




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: