Is Ory a good choice for a hardware device authentication?

[xuoguoto]

Hello all,

I stumbled upon this wonderful project couple of days ago when I was looking for a unified authentication for a linux based hardware device. This device has three means of interacting with users:

1. web based UI, which is based on react and its easy to get it work with Ory
2. Console login: Here user interacts with the system using console or over serial. A python program will be running to provide an interactive text based interface (think of some thing similar to bash)
3. SSH: Here the user login via ssh to access the same text based interface. My plans are to use python asyncssh to write a daemon which will handle the ssh server part (and not using the standard OpenSSHd server)

Now I am looking for a unified user management for all the three use cases. Web based is obvious and simple. I believe console app can use the username and password to authenticate, which is supported by Ory. The tricky part is ssh. Here I would want to authenticate using public key, as expected when using ssh.

The user management will be done via the web interface and when a user is created, with a specific role, that user should be able to login via web or console or ssh. To enable ssh key based access, the UI should provide a facility to upload ssh public key, just like whats done with github etc.

My question is whether Ory is capable of storing and or authenticating using the uploaded ssh key? An alternative is to just keep the public key in a key file some where and authenticate using it, but I need the username from Ory.

Here is the link for asyncssh authenticating using authorized-keys, just for reference.

Is this a supported use case or rather can Ory be made to work in this scenario?

Thanks for your help!

[Benehiko]

Hi @xuoguoto

The first two use cases (web based and console) are fully supported. However, the third case isn't as we don't support using the ssh public key as a "password". I would suggest opening an issue about this in Kratos.

ory/kratos#2453