[Beaker-devel] Authentication for non-Kerberos Beaker instances

Unless/until we fix the storage of passwords for Beaker's native password-based auth, I'd like to explicitly warn people away from relying on that configuration in the docs.

However, our own solution to that problem is to let mod_auth_kerb do the heavy lifting, which isn't going to be applicable to something like beaker.fedoraproject.org

Has anyone tried to use mod_auth_oauth at all? I'm wondering if that may be a more upstream-friendly alternative that still avoids relying on the currently-not-suitable-for-production-use-on-the-big-bad-internet password based auth.

Cheers, Nick.