WeChat ID
aaronpk_tv
-
Jesse Cooke
https://twitter.com/jc00ke
•
Jul 23
I used https://github.com/oauth2-proxy/oauth2-proxy in front of S3 years ago, worked quite well.
I just found a tutorial on deploying that on Heroku which is currently at the top of my list! -
Kevin C.
https://social.librem.one/@kcoram
•
Jul 23
@aaronpk
Does Vouch support OpenID Connect? I remember learning how to set it up for OAuth from instructions on your site . . .
It does! That's high on my list, but ideally I'd like to deploy this to something that doesn't require that I run nginx/Apache or a VM. -
Jason Lengstorf
https://twitter.com/jlengstorf
•
Jul 23
can you say more about what the ideal workflow is? if you can set a cookie, you can allow/deny access based on cookie presence https://docs.netlify.com/routing/redirects/redirect-options/#redirect-by-cookie-presence
I followed a few links from there and it looks like possibly this is the answer?
https://docs.netlify.com/visitor-access/role-based-access-control/#external-providers -
Jo Wouters
https://twitter.com/jowouters
•
Jul 23
Have you tried Snippet Injection? https://docs.netlify.com/site-deploys/post-processing/snippet-injection/ You could inject the Identity code in your static code https://identity.netlify.com/
That won't work, I need to prevent access to the files entirely if the user isn't logged in. -
Jason Lengstorf
https://twitter.com/jlengstorf
•
Jul 23
can you say more about what the ideal workflow is? if you can set a cookie, you can allow/deny access based on cookie presence https://docs.netlify.com/routing/redirects/redirect-options/#redirect-by-cookie-presence
Ideally I'd have something like a Netlify function run on every incoming request to check the presence of a cookie, validate it, and based on the result, either send an HTTP redirect to start an OIDC flow, or return the static file requested.
-
Bertrand Carlier
https://twitter.com/bertrandcarlier
•
Jul 23
mod_auth_openidc for Apache or nginx equivalent by the excellent @hanszandbelt?
Those and https://github.com/vouch/vouch-proxy are on my list, but require that I run an nginx/Apache server somewhere, and ideally I'd be able to deploy this on something that doesn't require a full VM. That's my backup plan tho. -
Jeremy Fiel
https://twitter.com/jeremyfiel
•
Jul 23
If you can't modify it, how do you have access to deploy it somewhere else?
It's a static site, so it's a pile of files. I can push those files around as much as I want, but changing them is not really feasible -
I have spent no joke like 4 hours trying to do this on @netlify already today and cannot for the life of me figure it out
-
certified post-corporate hellscape solutions
https://twitter.com/4c4d
•
Jul 23
Google, Azure, AWS all have the concept of the identity aware proxy, which is something that inspects the jwt/token and denies access if it's not valid. I've used GCP's, and it's pretty well featured, but the other providers should be reasonable as well (it's a common feature)
That's exactly what I want, but is there anything lighter weight than those platforms? It feels way overkill. I can't find a corresponding feature in Netlify or Heroku for example though. -
okay Internet, I need your suggestions:
I have a static website that I can't modify, and I want to host it on some platform that I can tie to an arbitrary OpenID Connect provider so that only certain people can access it.
What's the easiest way to do this? -
OK, so this is actually a super interesting article but the first sentence really threw me for a loop. Like it’s *technically* true but…https://engineering.fb.com/2021/07/22/data-infrastructure/mysql/
-
Banks, brokerages, PSN, the Steam Store, and more went down in massive internet outage - The Verge (www.theverge.com)"Outages like this show that, while the web is decentralized in theory, many major sites’ functionality is dependent on a handful of companies."
-
Dear Whole Foods aka Amazon. You know my entire grocery shopping history, you know how much tofu I buy, so why on earth would you think it's appropriate to send me ads for ground beef? #vegetarian #ads
-
jessekelber
https://micro.blog/jessekelber
•
Jul 22
@aaronpk nice Brommie! What luggage is that up front?
It's a brompton bag, I think it's the Metro Messenger bag! I got it over 4 years ago now! 😮
