TIL CUPS supports OIDC bearer tokens for auth.

Cursed idea for an in-person IndieWeb hackerspace: log in with your website to print. IndieAuth flows into an indielogin.com-style OIDC mediator.

Responsibilities split as follows: website attests its owner's identity, the OIDC mediator layer translates it into a single point of verification CUPS could understand. The OIDC layer could potentially be also responsible for assigning privilege layers to some and not others — e.g. limit paper quotas for some users, or allow somebody to access the admin interface with the hackerspace website IndieAuth proving ownership of the hackerspace itself.