转载

dex —— CoreOS 开源 OpenID 关联认证方案

CoreOS dex 是 CoreOS 开源的，基于标准的认证提供器和身份验证解决方案。

之所以称之为“dex”是因为集中化用户索引，软件的其他部分也可以进行验证。

主要特性：

安全
标准
语言/平台无关
身份验证联盟

提供以下组件：

PostgresSQL 数据库服务，作为 dex 的后端存储
单个 dex-overlord，密钥转换和其他管理任务
一些 dex-workers，为终端用户验证提供前端
产品网站 Tectonic.com

Just about every project requires some sort of authentication and user-management. Applications need a way for users to log-in securely from a variety of platforms such as web, mobile, CLI tools and automated systems. Developers typically use a platform-dependent solution or, just as often, find existing solutions don't quite address their needs and so they resort to writing their own solution from scratch.

Most developers are not in the security business, however. Having to write their own authentication software is not only an annoying distraction from their core product, but it can be downright dangerous as well. Doing security correctly is tricky, as we’ve seen with the many recent high-profile breaches, and doing it in a vacuum without proper auditing by other engineers and security experts is even more risky.

For these reasons, we have decided to open source dex so that others may benefit from the work we’ve done to make dex a secure and robust platform. Now available to the community, dex in turn will benefit from having more stakeholders. No one will ever have to write their own "Forgot your password?" flow, or “Login with X, Y or Z” feature again.

The project is named 'dex' because it is a central index of users that other pieces of software can authenticate against.

正文到此结束