phab: auth providers

[Martin Krizek]

I wonder if we should enable authentication through providers like GitHub instead of just
username/password (and FAS in the future). This would make it easier for non-fas users to
report bugs or contribute to the project. I also noticed that anonymous access to view
tickets is possible but one need to know the link, is there a way to fix this?

Any thoughts?

Thanks,
Martin

[Martin Krizek]

Link might be helpful:
http://www.phabricator.com/docs/phabricator/article/Configuring_Accounts_...

----- Original Message -----
>  From: "Martin Krizek" <mkrizek(a)redhat.com&gt;
>  To: "Fedora QA Development" <qa-devel(a)lists.fedoraproject.org&gt;
>  Sent: Wednesday, January 22, 2014 3:01:21 PM
>  Subject: phab: auth providers
>  
>  I wonder if we should enable authentication through providers like GitHub
>  instead of just username/password (and FAS in the future). This would make
>  it easier for non-fas users to report bugs or contribute to the project. I
>  also noticed that anonymous access to view tickets is possible but one need
>  to know the link, is there a way to fix this?
>  
>  Any thoughts?
>  
>  Thanks,
>  Martin
>  _______________________________________________
>  qa-devel mailing list
>  qa-devel(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/qa-devel
>

[Tim Flink]

On Wed, 22 Jan 2014 09:01:21 -0500 (EST)
Martin Krizek <mkrizek(a)redhat.com&gt; wrote:

>  I wonder if we should enable authentication through providers like
>  GitHub instead of just username/password (and FAS in the future).
>  This would make it easier for non-fas users to report bugs or
>  contribute to the project. 
The problem with doing this is usernames. If we allow multiple auth
mechanisms, how do we know which users came from where? How do we
handle username collisions when someone from github takes another
person's FAS username?

>  I also noticed that anonymous access to
>  view tickets is possible but one need to know the link, is there a
>  way to fix this? 
As far as I know, anonymous access is possible to most of phabricator.
The notable exceptions are to the landing page and the wiki (but there
has been discussion upstream on whether to change that last part).

Tickets are discover-able anonymously by using the Maniphest app:
https://phab.qadevel.cloud.fedoraproject.org/maniphest/

Tim