Orion 7.0, coming in late October 2014, will have significant improvements to its authentication infrastructure. Orion will now support OAuth 2.0 providers for authentication, in place of the OpenID and Mozilla Persona authentication methods. Orion 7.0 stable builds can be downloaded now on the Orion download page.
New Authentication Changes
Orion 7.0 allows you to authenticate using your existing OAuth 2.0 accounts. This means if you have an existing Google or GitHub account you will be able to log into Orion 7.0 securely and easily. This gives you multiple options for authentication.
With this update we also removed Mozilla Persona support. For more information on Mozilla Persona visit: https://login.persona.org/
This changes our home page slightly to display 3 methods of authentication:
With this update we are also updating the old Google OpenID authentication to the new Google OpenID Connect, based on OAuth 2.0. Soon Google will no longer support the old version so all systems need to updated accordingly. If you have already linked your account with your Google account you will need to update it to the new OAuth 2.0 authentication. Luckily this is quite simple.
All you need to do is try to authenticate to Orion using the Google icon. Then Google will prompt you to accept the new permissions.
That’s it! You will now be in Orion 7.0 and your account will already be updated.
For more information on Google’s authentication migration visit: https://developers.google.com/+/api/auth-migration#timetable
Create a Linked Account
Creating a linked account used to be difficult but we have now changed this to make it relatively painless. There are two ways to create a linked account:
- Create a new account
- Link an existing account
To create a new linked account, simply try to authenticate with the OAuth provider of your choice (GitHub or Google).
If the account does not exist you will be sent to an account creation page.
The account you create will automatically be linked to your OAuth account.
To link an existing account to your OAuth account is the same as it used to be. First log into your Orion the account you wish to link. Then go to the Settings Page → User Profile.
At the bottom of the page is the Linked Accounts section. Here you can either add/remove your OAuth accounts. You can also remove your old Google OpenID and Mozilla Persona accounts.
We plan to redo our landing page to make it more inviting and informative for new and existing users. This will explain the basics of what Orion is and how to use it.
We also plan to have more integration with your GitHub account so that if you link your account you no longer need to authenticate again to perform git operations.