Open
Description
I just merged ergochat/ergo#1111, which adds support for authentication plugins via subprocess invocation. The goal in this issue is to start managing IRC authentication credentials in userdb, then get everyone using SASL. Here's a tentative plan:
- hashbangctl should generate a strong, secret password on new account creation (@benharri was uncomfortable with this? I definitely want to hear any objections out)
- Write a script to check this password against userdb
- Turn off account registration in oragono, and instead configure this script (in the new
accounts.auth-script
config block), withautocreate
enabled - New account creation should automatically initialize
~/.weechat/irc.conf
to use SASL PLAIN with the autogenerated password. We could write a script likeenable-irc-sasl
that does this for existing users.