Mozilla Persona Authentication

Question

What are the advantages of using Persona if I want to restrict email adresses for accessing a site ? I have to manage in a same way the authorized email address on my server? What am missing ?

Answer 1

The two main advantages of using Persona on your site is that:

1. You don't have to store passwords in your database.
2. Your users don't need to pick a password just for your site.

If you want to restrict logins to specific email addresses (or restrict to a specific domain for example), then Persona doesn't really change anything for you. It gives you a verified email address and you still do the check on your own server.

Answer 2

Persona handles authentication for you, but not authorization. In other words, Persona enables you to easily prove the current user actually owns the email address they're passing to you, but it doesn't decide for you if you should give the owner of that email address access to your site.