User authentication approaches

[Julien Blanchard]

On 19/11/2020 17:21, Steve Lord wrote:
> Hi all, long time lurker, first time caller.
> 
> I was wondering how/if people are handling user authentication? I recognise that certificates could probably work, but these would authenticate a device rather than person. If the person loses the cert I imagine recovery would be difficult.
> 
> Is this a problem that has already been solved and my grep-fu on the gemini archive is just too weak? Has anyone implemented user authentication on any Gemini tools? I had a look at flounder’s code on sourcehut but using the web to do user stuff on Gemini seems a little counterintuitive.
> 
> I just wanted to see if it’s possible before I start writing stuff. It’s not unreasonable for Gemini to do things differently to the web. We just have to change our thinking to match.
> 
> Cheers,
> Steve
> 

The only examples I konow of is gemini://astrobotany.mozz.us/ which uses 
a user certificate for authentication and it works pretty nicely.