@@ -0,0 +1,36 @@
3+title = "General Website Permissioning"
7+grant_type = ["Proposal"]
8+grant_category = ["App Dev: Other"]
12+description = "Enabling the ability to log in and view private or user-specific content"
15+champion = "~tacryt-socryp"
24+A common pattern on websites of all kinds is the ability to log in and view private or user-specific content. Having the ability to require permission to access webpages and digital content is a powerful primitive for extending Urbit’s web publishing capabilities. As such, we’re building the `%auth` agent, an extensible user-login system that will start by supporting magic link login. In other words, it maintains a list of email addresses with permission to view some particular content, and if someone wants to view the content, they can enter their email address and receive a link that will take them to the content page.
28+Create an `%auth` agent that keeps track of usernames, HTTP cookies for their login, and sets timers to expire those cookies.
31+- I want to give access to my Studio web blog only to a small list of my friends.
32+- I want to sell access to my Studio web blog to paying subscribers and use an out-of-band payment for them to be added to the user list.
34+# Milestones and Compensation
36+June 2022 - Payment 3 stars - Auth agent is complete and supports magic link login. Auth agent may be used to permission access to Studio webpages or be used elsewhere.