Just throwing another idea into the pile whilst we're here. For a long time I've felt we could more easily support a lot more use cases if we separated Authentication from Authorization.
The simplest path for this would be to separate credentials (username, password) from the User record. This would mean then we normalise the idea of separating credentials, and having multiple sets for a single user; Each auth backend would know to check its own set, be it (username, password), or Twitter oauth token, or whatever. -- Curtis On Fri, 9 Apr 2021, at 12:50, NIKHIL MUDDAMSETTY wrote: > Hello, > I am Nikhil Muddamsetty and I want to add a new AUTH library with the > following features. > > 1 > Custom user model to support phone-number or email or username or a > combination of any of these three. > > 2 > Traditional Account signup and login > > 3 > Email verification for traditional signup. > > 4 > 2-factor authentication using OTP sent to email. > > 4 > Oauth signup and login support (Google, Github & Twitter for now). > > 5 > Authenticator app login support. > > 6 > Single user model for any kind of signup type (traditional or Oauth). > > 7 > Multiple social accounts linking to the same Django user instance. > > please provide me feedback, if this will be a good proposal. Can this > proposal be considered valid under the third category (Work on libraries that > supplement or add new features to Django to ease development) and what > features should be added (or removed) > > Regrads > Nikhil Muddamsetty > > -- > You received this message because you are subscribed to the Google Groups > "Django developers (Contributions to Django itself)" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to django-developers+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/django-developers/9e981ba2-1609-4edb-a15f-9f1068d0a640n%40googlegroups.com > > <https://groups.google.com/d/msgid/django-developers/9e981ba2-1609-4edb-a15f-9f1068d0a640n%40googlegroups.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-developers+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/30e22c95-e6b3-4e62-b365-a6b8ca1556ae%40www.fastmail.com.
