Openmaize authentication library - now called Phauxth

Hi @riverrun, thanks for the great library!

Do you have any plans to add oAuth providers support (e.g. Facebook)?

Yes, but I don’t know when. I need to do a little bit of research about them first and then look into implementing them.

I current use Ueberauth at work for authentication (using a ueberauth_ldap plugin to access the LDAP server) as well as the Google OAuth to authenticate to our Google Business account as well. How would openmaize work in comparison?

To tell you the truth, I’m not really sure how they are different. I’ll have a closer look at Ueberauth and try to find out more.
Regarding Oauth, though, Openmaize doesn’t support it at the moment. It uses password authentication, with support for two-factor authentication, and if password authentication succeeds, then a JSON Web Token is used to authenticate subsequent requests.

A quick update and notification about a change in beta.2:

Before, there was a database setting called db_module in the config. That has now been removed, and you have to set the db_module directly when you use the plugs. There’s an example in this module. The plugs affected are Openmaize.Login, Openmaize.OnetimePass, Openmaize.ConfirmEmail and OpenmaizeResetPassword.

If any of this is unclear or you have any questions, please let me know.

I’ve release version 1.0 (no beta).
Other news is that I’ve opened an issue about adding an option to use sessions instead of JWTs. It would be good to get some feedback about what developers would prefer.
There is also this issue about migrating from Rails / devise. I hope to be making some improvements to the documentation about this in the next few days.

I’ve just released openmaize version 2.0, which uses Plug cookie-based sessions by default, and openmaize_jwt version 1.0, which uses JSON Web Tokens.
Here is the upgrade guide for openmaize, and
here is the upgrade guide for openmaize_jwt.
Here is an example app using openmaize, and here is
an example app using openmaize_jwt.

Small update to using the Plugs in Openmaize:
If you are using the db_module generated by openmaize.gen.ectodb, you don’t need to write db_module: MyApp.OpenmaizeEcto any more, as this is now the default value.
So, for example, plug Openmaize.Login, [db_module: MyApp.OpenmaizeEcto] when action in [:login_user] can now be written as plug Openmaize.Login when action in [:login_user].
If you have any questions, just let me know.

Just released version 2.2 of Openmaize.

There are two big changes:

1. The generator mix openmaize.gen.phoenixauth is a lot more powerful now and running it after mix phoenix.new will produce a workable app with user authentication. If you add the --confirm option, it will also produce the modules needed for email confirmation and password resetting. See this guide for more info. I’m afraid there isn’t much support for generating files for apis - I haven’t had enough time.
2. I’ve moved the database-related functions to within Openmaize (they were previously separate to allow developers to use custom database modules, but I now think that this is not necessary, and making this change makes the library more maintainable). If you’re upgrading from a previous version, please read this guide.

Last week I updated Openmaize to version 3.0.

The major changes are that I’ve added configurable logging to it and updated the installer (for Phoenix apps) and the wiki.

For anyone who is already using Openmaize, there are two other small changes:

• the default unique_id (user-identifier) for the Login and OnetimePass modules is now email (instead of username).
• the user map that is returned by the Openmaize Plugs now filters out certain keys to help prevent sensitive information being leaked

At the moment, the logging provides info and warn messages in logfmt format. The log level, though, can be changed by setting the log_level value in the config - and it can be turned off by setting this value to false.

Finally, many thanks to everyone who has contributed to this project, especially Christian Bäuerlein and Franco Bellagamba, who helped with the installer, Ben Sharman, who contributed to the logging feature, and Guido Tripaldi, who worked with me on making the OnetimePass Plug more secure.