Login Access outside of Google Accounts?

33 views

Skip to first unread message

Michael Chong

unread,

Jun 17, 2021, 8:05:55 PM6/17/21

to PheWeb-UMich

Thank you for developing an amazing tool!

I'm currently trying to set up a pheweb server for internal use at my research institution which does not use google accounts. It looks like based on the documentation, Oauth requires a google account / project. Is there a way around this to accommodate non-google emails?

Thanks again!

Mike Chong

pjvandehaar

unread,

Jun 19, 2021, 1:05:05 AM6/19/21

to PheWeb-UMich

Here are options I can think of:

1. Your users can make google accounts connected to their non-google email addresses. Google will let you sign up for a gmail account named "_exam...@outlook.com" (or at least they used to).

2. Instead of using Google accounts for OAuth, you could do OAuth from Microsoft or Github or Trello. You should be able to support multiple different providers at the same time, like if some of your users have Google accounts and the others have Microsoft accounts. This option would require some changes to `pheweb/server/auth.py`. I can give you advice on those changes if you need it. I'd like to have this change integrated back into the PheWeb sourcecode.

3. You could hard-code a list of usernames and passwords. Then you could either use Basic Auth (by just giving a htpassword file to Apache or Nginx) or you could make your own login page in PheWeb (which also sounds quite do-able though I wouldn't help much).