I've been thinking about delegated authority on websites lately.It would be convenient if I could delegate certain functions to people, for example allowing someone like my accountant to have access to some of my financial records.Some organizations make this easy, allowing me to have multiple accounts.Other services don't offer this, nor do they offer any kind of OAuth type of delegated authorization or capabilities model.I've been thinking about ways around this.One very wacky way would be if Alice could have a a "special browser" that would tie into some service she runs. Bob would log in with his credentials and then behind the scenes the application logs in as Alice.This would be very complicated to implement though.1/#Authentication #Authorization #InfoSec #Passwords #Passwordless #Programming

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 1 point 1 year ago (1 child)

@lbnvds@mastodon.social

Yes, 100% we can solve this if we're developing the application!

I'm talking about how we solve if it we're on the user end.

  • source
  • parent
  • hideshow 1 child comment