Leveraging IndieAuth for Federated Authentication

Entropic pitches itself as a federated authentication service. However, it’ll fall to the same authentication issue that most independent projects have by relying on a centralized service to identify people. There’s a [living standard for an extension to OAuth2](https://indieauth.spec.indieweb.org/) - already used for GitHub authentication that allows people to bring their own identity to authenticate sites. A real world example of it is live at on the wiki for the [IndieWeb](https://indieweb.org). This would also enable those who don’t use GitHub to contribute packages to hosted instances of `entropic`.

I’m very open to helping to contribute to this as well - wanted to get some feedback on this before going deeper.

(Originally published at: https://v2.jacky.wtf/post/b600eda8-8c24-46f4-8d99-eabbe84967ba)