openid

Inhouse registration vs. OpenID vs. Google Friend Connect vs. Facebook Connect vs. (etc)

由 寵の児 提交于 2019-12-20 08:57:30
问题 I'm trying to decide how to allow users to register for my website... there's openID, clickpass, facebook connect, google friend connect, etc, or the good old fashioned in-house "enter a username, email, password, etc." Looking briefly at How to set-up OpenID it seems like a lot of work to get openID working. Does anyone have experience setting up a site for OpenID (or the others)? Also, does anyone know if these methods have a higher turnover rate of registration than the classic "inhouse"

Login system just like stackoverflow's, written in php

由 落爺英雄遲暮 提交于 2019-12-20 08:19:41
问题 The question Is there a simple way to implement the login system that stackoverflow uses using php? For a long time I have developed websites, and have used a typical web form username/password with a mysql db for login systems. I would like to have it so users can log into the system using google, yahoo, facebook, etc, and without them having to remember some long openid url (they should just click google and be able to log in using their username/password there). I would prefer not to use a

Using OpenID (via DotNetOpenAuth) along with user roles and other Membership Provider features

由 北城以北 提交于 2019-12-20 08:04:19
问题 I'm building an ASP.NET MVC site where I want to use DotNetOpenAuth to implement OpenID login (I'm completely dropping username/password-based login). So far, I've been writing my code for the default username/password system with the ASP.NET Membership Provider, utilizing the roles system, the profile system, and the basic registration system. Now, in my migration to OpenID, I'm foreseeing some issues, specifically with interfacing with membership controls provided by the ASP.NET Membership

Connecting to Azure B2C, with .NET Core from behind a NGINX Proxy

由 柔情痞子 提交于 2019-12-20 07:23:59
问题 Almost have this working. Almost. My set up is that I have an Azure B2C Tenant set up, and some modified example code that I've changed to reflect the Tenant information. This all works fine locally, with a localhost uri. My remote set up is a Ubuntu 16.01 server, with a Nginx 1.10.0 webserver acting as a reverse proxy to a .NET Core 1.0.4 and all with a LetsEncrypt SSL cert. The proxy serves .NET projects fine, however when I hit the sign in it takes me over to the B2C login with an

OpenID links error

由 微笑、不失礼 提交于 2019-12-20 06:39:16
问题 I am trying to integrate openid authentication in asp.net 4 following this article. I have proceeded as was demonstrated in the article. The problem i face is that only openid login link works. All other links gives an error: Precondition failed.: userSuppliedIdentifier != null I have uploaded the page here. Also the openid selector from the toolbox doesn't work as i have asked here. Kindly reply. 回答1: If you are following the example you referred to then in method HandleRelyingPartyRequest,

Open Id Connect Doubts - Identity Server 4 // How to grant specific users to concrete scopes?

由 霸气de小男生 提交于 2019-12-20 06:27:27
问题 I have some doubts after reading the Open Id docs. Any help will be much appreciated. Following any of the oidc flows you end by having an id_token and a access_token. a)When you send the access_token to a protected api, why or when (example) it would need to retrieve some claims about the user who owns it? Maybe if the protected api wants to use some data about the authenticated user? b) For obtaining the claims the protected api will need to communicate with the UserEdnpoint endpoint? It

how to verify google openid response

由 半世苍凉 提交于 2019-12-20 02:51:26
问题 I'm trying to add authorization throw google openid to my users. I'm receiving id (https://www.google.com/accounts/o8/id?id=AIt...Ew-Bo) but how can i check that it's legit. I mean user can create malicious request with email of another user, how can i check that returning email and claimed id is legit? 回答1: Rather than trying to implement discovery and signature verification by yourself, you really ought to use one of the many libraries that have already been created for this purpose. Here

Invalid_client using OpenIdConnect in client application

由 会有一股神秘感。 提交于 2019-12-20 02:29:11
问题 I have an IdentityServer4 application running with ASP.NET Identity. I want to use that so users from another application can login through my remote identity server. I have configured a client application in identity server with the following settings (showing only relevant settings): ClientId: mvc ProtocolType: oidc ClientSecret: K7gNU3sdo+OL0wNhqoVWhr3g6s1xYv72ol/pe/Unols= (URLs to client app) RedirectUri: https://localhost:44313/signin-oidc PostLogoutRedirectUri: https://localhost:44313

小程序获取openid 小程序授权

由 时光怂恿深爱的人放手 提交于 2019-12-20 02:10:10
小程序获取openid 小程序可以通过微信官方提供的登录能力方便地获取微信提供的用户身份标识，快速建立小程序内的用户体系。 wx.login(Object object) 调用接口获取登录凭证（code）。通过凭证进而换取用户登录态信息，包括用户的唯一标识（openid）及本次登录的会话密钥（session_key）等。用户数据的加解密通讯需要依赖会话密钥完成。 通过 wx.login 获取登录凭证code ，然后调用后台接口 wx.request 发送参数code调用接口换取openid和session_key, wx.checkSession 检测当前用户登录态是否有效 onLaunch: function (options) { // 检测版本的更新（添加) var that = this; const updateManager = wx.getUpdateManager() updateManager.onCheckForUpdate(function (res) { // 请求完新版本信息的回调 }) updateManager.onUpdateReady(function () { wx.showModal({ title: '更新提示', content: '新版本已经准备好，是否重启应用？', success: function (res) { if (res

OpenID authentication from an installed application

由 隐身守侯 提交于 2019-12-20 01:41:42
问题 I'm currently planning a new web project. Clients are going to connect using a regular web browser and, in case of regular java-enabled cell phones, j2me client. I would really like to make use of the OpenID authentication. In case of regular web browser things are pretty straightforward. However, I am really not sure about installed applications (such as j2me client installed on a mobile device) - regular OpenID authentication is performed by entering username/password on a webpage of
订阅 openid