Aaron Parecki

Similar issue for authentication: I want to jump into the convos on discuss, but I want to come in with something better than "This is broken on my site and I don't know why" 😀

Agreed, it'd be nice for them to include it in a way that doesn't confuse people, like those fake download now buttons on scammy sites.

I watched your IWC talks on YouTube earlier this week and I'm looking forward to trying the hosted Aperture. Just need to fix some auth bugs.

Thanks for the link, I'm going to give it a read today.

And yes, it is annoying there is no standard way to show a plug-in's GitHub link.

Yep! github.com/indieweb/wordp…

That's annoying that wordpress.org doesn't have a link to the GitHub source.

Wow, really interesting.

Is this plugin on Github? wordpress.org/plugins/indiea…

Alright, I finished my post explaining the details of this! Have a look ➡️ aaronparecki.com/2018/07/07/7/o…

Link? (On the road, but want to put a pin in this)

This is something I could find official time to support I'm sure. Lack of official auth has been a thorn in our side at work.

Sounds like it's time to deep dive into authentication systems. I admit, I'm out of my depth here in a variety of ways but want to improve.

Ryan, I wish our needs we're aligned so I could help, but a standalone plugin isn't a need for me. I'll probably use Passport. If it works, I'll open source what I do/ write about it.

What talk has there been around core inclusion / feature plugin? Are there tickets I can add to or is everything happening in the repo?

As I said, would love to have collaborators on the OAuth 2 plugin or on the centraliser system. :)

Sounds like we have the foundational elements for a collaboration, maybe even a feature plugin.

We're about to expand on our custom auth WP API auth too. I don't have time to build and maintain a composer package with a complete oAuth2 for WP API, but I'd contribute to it.

If you do, please build a new OAuth2 solution and make it stand-alone. The existing options are suboptimal

Which might end up causing even more technological division. Though as a larger company you have a bit better chance of implementing something that others could scaffold onto as needed.

Agreed. What sucks is we are going to have to introduce our own authentication based on existing OAuth solutions for WP for things we want to do with Gravity Forms. We'd much rather be able to leverage core functionality. It really sucks that we cannot do so.

Exactly what I was thinking. I'm glad for the work of Aaron and others, but the challenge of getting core buy-in for some projects seems antithetical to the meritocracy idea that can be espoused.

Absolutely. I was more implying that someone should take this plugin and move it into core as a quick way to get OAuth into WordPress, since the work is already done.

There are obviously ways to do it. But the problem is it introduces friction. Users have to do X before they can do Y. Instead of just being able to connect an app to their WP site without having to install additional tools. WP needs a core solution for authentication.