SSL in Yesod (was Re: [web-devel] State of yesod-auth)

TLS brings up another question, what is the current state and roadmap of SSL in Yesod? Max On Oct 3, 2010, at 9:28 PM, Michael Snoyman wrote:

On Sun, Oct 3, 2010 at 12:17 PM, Max Cantor wrote:

...

Is yesod-auth ready for use in development? the 0.0.0 version number is setting off a few alarm bells that there might be a lot of undefined/error calls sprinkled throughout the code and its mostly just type signatures.

If it is, I'd like to take a look at it.

yesod-auth has a deceptively low version number: up until and including yesod 0.5.*, the Auth subsite is included with yesod. For various reasons, I've decided to start releasing it as a separate package. yesod-auth 0.0.0 is basically a straight rip-off from the yesod 0.5.1 codebase, plus the new plugin approach to authentication backends. Given that the main authentication code is in production use in a few places, I'd say that yesod-auth is stable enough to use.

I'm currently working on adding OpenID 2 support to yesod-auth using the openid package[1]. To do so, I've had to take a long, circuitous path of creating the http-enumerator[2] package based on tls[3], but hopefully these efforts will benefit the community in general. I just got OpenID 1/2 seemless authentication working on my home system, and I'm going to try deploying that as the authentication method for the upcoming haskellers.com.

Of course, most of the code needed to get the built-in OpenID 2 support isn't released yet, but depending on how things go with some upstream patches it can be released in the near future.

Michael

[1] http://hackage.haskell.org/package/openid [2] http://hackage.haskell.org/package/http-enumerator [3] http://hackage.haskell.org/package/tls