my #DecemberAdventure has been kinda wild even though I haven’t been posting about it here much (and the updates on my site are in bigger spread out batches). i learned a lot about golang, oauth, oidc, jwt, xss, and csrf… lotta nonsense out there! go is actually pretty cool though, and i have a working “log in with google” style auth server that (i think) implements just enough of a subset/dialect of oauth 2.0 and oidc to be pretty secure for only no-js web server applications.
still a lot of rough edges to sand off, but the very near dream is that i will have a single-binary, sqlite-backed, systemd-managed auth server that will let me be prolific in writing small, low-resource, no-js web apps with user accounts for community/neighborhood scale computing 