SceneID 3.0
category: general [glöplog]
Here's another from the "overhauling relics" hat.
We've (Tomoya, Susencrusen and myself, with additional help by Dfox) been working on a more secure solution for SceneID than the current one (which bleeds from many wounds) and built an OAuth2.0 based solution instead; what this means for the average user is that the portals will no longer have access to their password in any shape or form, instead the usual "click to log in -> redirect to sceneID -> authorize -> go back to site -> et voila" flow will take place. We also have a pretty flexible internal code for this right now so we might extend the service for some more fun interportal activity, and the new SceneID portal will hopefully also be more bot-spam-resistant.
For site-owners, the documentation will be public (moreso than previously) and integration will be easier since it's a known protocol and there are plenty of libraries for it already. Hopefully this spurs some more sites into action :)
The switch for this will take place on Monday (Dec 1st) 18:00 CEST and should only take a few minutes; hopefully we won't break anything spectacularly either.
We've (Tomoya, Susencrusen and myself, with additional help by Dfox) been working on a more secure solution for SceneID than the current one (which bleeds from many wounds) and built an OAuth2.0 based solution instead; what this means for the average user is that the portals will no longer have access to their password in any shape or form, instead the usual "click to log in -> redirect to sceneID -> authorize -> go back to site -> et voila" flow will take place. We also have a pretty flexible internal code for this right now so we might extend the service for some more fun interportal activity, and the new SceneID portal will hopefully also be more bot-spam-resistant.
For site-owners, the documentation will be public (moreso than previously) and integration will be easier since it's a known protocol and there are plenty of libraries for it already. Hopefully this spurs some more sites into action :)
The switch for this will take place on Monday (Dec 1st) 18:00 CEST and should only take a few minutes; hopefully we won't break anything spectacularly either.
awesome! great work! thanks everyone involved for the effort!
i take it the old sceneid accounts are all migrated or do we need to signup for a new one?
i second psenough :)
Nice news. Eager to integrate it with ZX-Art.
Quote:
i take it the old sceneid accounts are all migrated or do we need to signup for a new one?
They'll migrate when you log in. This is needed because old SceneID accounts had e.g. no restrictions on the username format so there's a bunch of people with login names that consist entirely of punctuation or kanji. It will also re-validate your email address because there was no mechanism for that either; I wanna keep a fairly consistent DB.
On that note, if your email address is fake or bogus or broken, you might wanna fix that in time.
okay, thanks for the headsup and caretaking!
thumbs up :)
so...
a capsuled login? single instance?
sounds good. :)
Quote:
"click to log in -> redirect to sceneID -> authorize -> go back to site -> et voila"
a capsuled login? single instance?
sounds good. :)
Attention people who actively use the sceneid.net OpenID service to log into non-scene websites like StackOverflow or OpenStreetMap:
(If you're not sure whether this applies to you, it probably doesn't.)
As part of the changeover, sceneid.net will be retired. Therefore, if you have an account on a non-demoscene site that can only be accessed through your sceneid.net login, you'll need to change this before December 1st, or you will be locked out of that account. All sensible OpenID-enabled sites will let you change your OpenID to something else once you're logged in, so get yourself an OpenID with another provider and update your account details on that remote site. Or you can party like it's 1994, and set up a good old-fashioned password-based login instead.
I'll try to get in personal contact with the people affected: those who have used sceneid.net to log in to a remote site within the last 12 months.
If you're reading this in the future (woo, trippy), and the changeover has already happened before you had chance to update your accounts: don't panic. It should be possible for me to re-activate individual logins to the point where you can log in again and update your details, so get in touch on this thread or by email to gasmanATraww.org.
(If you're not sure whether this applies to you, it probably doesn't.)
As part of the changeover, sceneid.net will be retired. Therefore, if you have an account on a non-demoscene site that can only be accessed through your sceneid.net login, you'll need to change this before December 1st, or you will be locked out of that account. All sensible OpenID-enabled sites will let you change your OpenID to something else once you're logged in, so get yourself an OpenID with another provider and update your account details on that remote site. Or you can party like it's 1994, and set up a good old-fashioned password-based login instead.
I'll try to get in personal contact with the people affected: those who have used sceneid.net to log in to a remote site within the last 12 months.
If you're reading this in the future (woo, trippy), and the changeover has already happened before you had chance to update your accounts: don't panic. It should be possible for me to re-activate individual logins to the point where you can log in again and update your details, so get in touch on this thread or by email to gasmanATraww.org.
Will my accumulated scenepoints also migrate?
Quote:
Will my accumulated scenepoints also migrate?
You'll actually get more if you migrate as an early adopter!
Yes it will be a shame to lose all those precious scenepoints.
great work and good luck for the migration :)
and RIP sceneid.net :'(
great work and good luck for the migration :)
and RIP sceneid.net :'(
kiss your demoscene privacy goodbye! the scandinavian scene conspiracy knows exactly what demos you watch, what productions you've made and what stuff you posted... oh wait...
Quote:
Summertime in winter B-)CEST
The S stands for SceneID, not summer ;)
Kudos!
Also, this finds me wondering if there were a way to set up party pages for folks to add themselves to the who's coming page using their sceneID. That would be cool.
Quote:
For site-owners, the documentation will be public (moreso than previously) and integration will be easier since it's a known protocol and there are plenty of libraries for it already. Hopefully this spurs some more sites into action :)
Also, this finds me wondering if there were a way to set up party pages for folks to add themselves to the who's coming page using their sceneID. That would be cool.
yeah, especially for the visitors without a sceneid!
Yay!
Quote:
Also, this finds me wondering if there were a way to set up party pages for folks to add themselves to the who's coming page using their sceneID. That would be cool.
Honestly, yes, it is possible, but I'd think that 1. SceneID integration might be overkill for that (it's just entering your name, really, no need to "authenticate") and 2. it sounds like something that should be Demoparty.net's area, if they'd have an API for this sort of thing.
hm. point. although demoparty.net seems not in very active development. my theory is more visitors with scene ids, if we make a point to mention pouet and demozoo for new ppls benefit, means more prods submitted by their makers where folks casually look, not just the orgas doing it along w the scene.org upload. and getting new folks more engaged w the wider scene who have just attended one isolated party in less active places like NA.
Anyway, I overthink. (:
Anyway, I overthink. (:
SceneID 3.0 migration will start soon; during this, login may or may not work; after the migration is done, all accounts will be logged out.
works.
works fine :)