FedOAuth deprecation: merging efforts with Ipsilon

[Patrick Uiterwijk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,

As most of you probably know, the authentication system in use at the Fedora Infrastructure currently is FedOAuth[1], of which I am the original author (original name was FAS-OpenID) and primary maintainer.
A little while ago, Petr Spacek let me know[2] that there was a project with the same goals (multi-protocol federated identity provider) also going on: ipsilon[3] (he also notified ipsilon upstream[4]).

After discussing with the ipsilon author, we decided that we are going to merge efforts, because we are currently duplicating a lot of effort on both ends.
After consideration of the state of both codebases, we decided we would move forward with the ipsilon codebase.
The ipsilon codebase does lack some features that FedOAuth has, and we are now working on getting all those features that FedOAuth has but ipsilon lacks into ipsilon.

After this is completed, and ipsilon gets stable enough, I will be going to move all current FedOAuth instances over to using ipsilon, this includes the Fedora Infrastructure instance.

To keep track of the features that ipsilon is currently missing and the steps required to replace FedOAuth with ipsilon in the Fedora Infrastructure, we have a wiki page[5]: please let me know if we missed anything or if it needs clarification.

There is currently no hard schedule for the migration yet, because we first need to get all missing features into ipsilon.

I will keep this list updated on when we have all required features into ipsilon and when we will start the next steps of the migration process.

If anyone has any comments, remarks or questions regarding this, please let me know!


[1]: https://github.com/FedOAuth/FedOAuth
[2]: https://github.com/FedOAuth/FedOAuth/issues/61
[3]: https://fedorahosted.org/ipsilon/
[4]: https://www.redhat.com/archives/freeipa-devel/2014-August/msg00046.html

- -- 
Patrick Uiterwijk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=Knn4
-----END PGP SIGNATURE-----