User authentication approaches

[Steve Lord]

Hi all, long time lurker, first time caller.

I was wondering how/if people are handling user authentication? I recognise that certificates could probably work, but these would authenticate a device rather than person. If the person loses the cert I imagine recovery would be difficult.

Is this a problem that has already been solved and my grep-fu on the gemini archive is just too weak? Has anyone implemented user authentication on any Gemini tools? I had a look at flounder’s code on sourcehut but using the web to do user stuff on Gemini seems a little counterintuitive.

I just wanted to see if it’s possible before I start writing stuff. It’s not unreasonable for Gemini to do things differently to the web. We just have to change our thinking to match.

Cheers,
Steve