Document the authentication protocol

[rambip]

Hi !

I would like to deploy polis for my own organization (in my university basically). We have a SSO setup, that uses openID connect (OCID).

I'm not familiar with how authentication works, so forgive if I ask dumb questions.

From what I understand, there are 2 main ways to implement authentication:

• completely stateless, where the browser stores some sort of token when the user signs in to the server. It is a bit more involved with oauth, because you need to communicate with the identity provider
• statefull, where the server stores session information for each device.

Is polis stateless ? If so can I have an explanation of how the tokens are exchanged between the client and the server ?

How do you deal with the 2 types of connection (twitter / facebook and polis account) ?

I would like a lot to contribute, to implement OCID and improve the login experience.

Thank's for the help