While Towel is still not complete (and as I discovered today, may have to be renamed, but that may not be the case), work has more been placed on MasterKey (which is yet to have a brouchure site of any kind whatsoever).
Basically it is a Passport style thing, but I plan it to only be for authentication purposes only. It will take over authentication for the Nebulous Extranet soon, as well as my webmail, and then other things around my sites (such as phpMyAdmin, and towel administration, and towel user authentication). While I don't have great desires to push it out into the web to compete with passport, but eventually I'll get an SSL type certificate for it, which might make it useful for Nebulous Customers, or other people.
I'll do up a 'how it works' etc on it soon.
The 'service' side stuff basically works - it does not currently create a MasterKey session (so does not keep allow you to login, and then just click to sign in on other sites), this is a todo (simple, easy, shouldn't be too hard). Another 'service' side todo is a corresponding 'logout'. This will require more 'client' side functionality (the service side would make a call back with a session id saying 'destroy this session now, or else', and the client site would somehow have to do it). The client side can retrieve the 'nonce', but as of yet doesn't do much with it (other than to check if it's there, and not an error message).
subscribe to the doubleshot feed