New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update to DPoP authentication. Legacy being deprecated. #57

Open

ewingson opened this issue Jan 23, 2022 · 0 comments

ewingson commented Jan 23, 2022

Solid recently had an update from legacy auth to the use of DPoP auth.

We noticed that your app still is using the old auth.

We'd like to encourage you to switch to the new auth using the Demonstrating Proof of Posession technology.

Our motivation for the update was using the standard OIDC-way.

CSS is and will only use DPoP.
For a transition period NSS is able to use both legacy and DPoP.
SolidOS has been migrated and only uses DPoP.

Javascript libraries using the new authentication methods include :

Inrupt's solid-client-authn-browser for the browser and solid-client-authn-node.
and solid-node-client for nodejs.
To obtain a token for nodejs app login, you will also need Inrupt's generate-oidc-token.

Some simple examples of javascript app using the DPoP auth can be found here

https://github.com/0dataapp/hello/tree/main/solid.
or https://github.com/jeff-zucker/solid-ide (simple migration).

The list of apps using the new DPoP authorization can be followed here dpop-status.

Just let us know if we can assist you on switching your app at https://gitter.im/solid/app-development or https://forum.solidproject.org

From solid team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment