[openstreetmap-website] Add support for "login with Facebook" and MS live (#153)

[apmon]

Yes, there is a test instance at http://apmon.dev.openstreetmap.org/ with up-to-date code

For some background on the legal issues for others reading this ticket:

Unlike Google and Yahoo, Facebook doesn't implement the appropriate APIs for federated authentication, which would be OpenID. Instead it (miss)uses OAuth for this purpose (as it presumably expects wanting to also retrieve the full social graph and other private information of a user from Facebook). With OAuth, however the "relying party" has to register with each "identity provider" explicitly. I.e. OSM(F) has to create an account with Facebook and register osm.org as an OAuth app. As such it has to explicitly sign the Terms of Use contract with facebook.

If I remember the issue correctly, the problem with the Terms of Use is the clause that the facebook app (in this case osm.org) has to be legal in any country it is used. However, mapping might not be legal in all countries, however osm.org (and as extension as a facebook app) is technically accessible in those countries. Now the worry is that facebook could sue OSMF for violating their TOU, due to this.

I can't remember if there were other issues raised.

This patch however also implements "login with Microsoft Account" (which is in the same technical boat of using OAuth and therefore needing an application ID by registering osm.org with Microsoft). Although Microsoft-Account might not be as "sexy",  there are still over 500 million users with Microsoft accounts and it integrates nicely with Windows 8. So a big potential for use as single sign on solution. Has the LWG looked at the status of the TOU of Microsoft? Are there any issues with that? Can this part of the patch be deployed?

---
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/153#issuecomment-21297692
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20130720/cb84e959/attachment-0001.html>