Could somebody please land this at some point t?

Rebased and run unit tests again

(On a broader theme, this code should probably move into rP, right? Is there any use-case for arcanist directly making calls to 3rd party services?)

running celerity map should just fix it. I'll take a look.

ok, done. But I don't know how to fix the unit tests. after running celerity map command what should I do ?

ok, I'll try. is there any expectation or format for the git message ?

also link to the updated Twitch docs about the auth API?

@k__nard: do you mind submitting the diffs as revisions using arc diff?

@speck I saw you commented earlier about this and am not sure if this was something you managed to do, or if you wanted someone else to handle the task?

What you're talking about is more like mTLS (mutual TLS), that's not actually how WebAuthn works. (Though supporting mTLS for sign-ins might also be something worth looking into)

I've only looked at the new auth frameworks briefly (WebAuthn, is there another standard too?). My basic understanding is that the browser provides the client with its own certificate which HTTP requests are able to include with it, as a means of providing authentication for the user. This seems like a reasonable thing to allow though I'd also be interested in learning more about the tech in general.

We should definitely focus on implementing WebAuthn, as that allows us to support almost every standard hardware key solution out there.

The upstream discussion is at https://secure.phabricator.com/T8787

For Google, you can sign up for a Cloud Identity Free tenant and then set up the Oauth app inside Google Cloud. The Cloud Identity free system is basically Google Workspace/GSuite's user management system only.

Please revert this @chris

And for google you don't need to provide an email, you can also just get a gmail address.

@speck we can use the existing GitHub organization for oauth. (an owner can setup the app in settings)

I think this would be reasonable but I think it requires setting up an account on GitHub or Google on behalf of Phorge (rather than using a member's personal account). If someone wants to set up a GitHub/Google account for phorge we can set it up here. It'll require an email address though and I'm not sure how to handle an organization email like that.