Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
using pre-existing certificates for accounts
I'm trying to use vanilla to set up a school-wide forum at my university. All the students already have certificates, and I want to leverage those to allow students to log into their accounts on my forum.
One idea I had was to have a separate page detect the certificate, and, upon detection, install a cookie for the forum (i.e. log them in). But I'm not sure what to do for registration--I don't want to have to approve registrations; it would be nice if the first time their certificate is read an account is created for them (probably with an autogenerated password that gets emailed to them). Does this sound like a good strategy and does anyone have suggestions for how to solve this registration problem?
Thanks.
One idea I had was to have a separate page detect the certificate, and, upon detection, install a cookie for the forum (i.e. log them in). But I'm not sure what to do for registration--I don't want to have to approve registrations; it would be nice if the first time their certificate is read an account is created for them (probably with an autogenerated password that gets emailed to them). Does this sound like a good strategy and does anyone have suggestions for how to solve this registration problem?
Thanks.
0