openid

How do I Integrate OpenID into MVC4 Web API

时间秒杀一切 提交于 2019-12-03 03:43:56
问题 I am writing a Web API using MVC4 that should be consumed by multiple client types. I want to use the OpenID to authenticate. I already have downloaded the DotNetOpenAuth NuGet package, but so far all of the examples are for a client app, rather than an API. My problem is simple. I want to have clients send an authentication request to my API. The API authenticates with an OpenID provider. The API then sets whatever it needs to in order to use the [Authorize] tags throughout the web api calls

Is there a Spring Security OpenId Registration like stackoverflow?

↘锁芯ラ 提交于 2019-12-03 03:38:28
问题 I cannot find a complete example anywhere of a Spring Security Web App with Open Id registration similar to stackoverflows. I would say I'm pretty techy guy but I find Spring Security extremely intimidating with its weird Spring XML DSL. I have found bits and pieces of how one would do the good ole' stackoverflow registration using: Spring Security Open ID sample WAR Hillerts Blog 3 part blog posting Spring Security Official Doc on OpenId (the email attributes are wrong see next link)

OpenID Library for PHP 5.3

て烟熏妆下的殇ゞ 提交于 2019-12-03 03:28:15
Does anyone have openid working in a PHP 5.3 installation? None of the libraries I've tried seem to be working. Ok, I finally got to fix the library... I explained everything here (you can also download the php-openid library after my changes). I needed to do what Paul Tarjan suggested but, also, I needed to modify the Auth_OpenID_detectMathLibrary and add the static keyword to a lot of functions. After that It seems to work perfectly although it is not an ideal solution... I think that someone should rewrite the whole library in PHP 5... The solution is to remove all the of pass-by-reference

How to use OpenID in RESTful API?

て烟熏妆下的殇ゞ 提交于 2019-12-03 03:06:37
问题 I'm building Pylons-based web application with RESTful API, which currently lacks any authentication. So I'm going to implement that and in order to avoid all the trouble and caution with storing user passwords, I'd like to use OpenID for authentication. What would be the best way to do this? Are these two things compatible? Are there existing REST APIs that use OpenID that I can take inspiration from? 回答1: I've now spent some time researching the options and would like to summarize the

OWIN middleware for OpenID Connect - Code flow ( Flow type - AuthorizationCode) documentation?

匿名 (未验证) 提交于 2019-12-03 03:06:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: In my implementation I am using OpenID-Connect Server (Identity Server v3+) to authenticate Asp.net MVC 5 app (with AngularJS front-end) I am planning to use OID Code flow (with Scope Open_ID) to authenticate the client (RP). For the OpenID connect middle-ware, I am using OWIN (Katana Project) components. Before the implementation, I want to understand back-channel token request, refresh token request process, etc using OWIN.. But I am unable to find any documentation for this type of implementation (most of the available examples use

OWIN OpenID connect authorization fails to authorize secured controller / actions

匿名 (未验证) 提交于 2019-12-03 03:06:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am working on a project where a third party provider will act as an Oauth2 based Authorization Server. An Asp.net MVC 5 based client which will send the user to the authorization server to authenticate (using login / password) and the auth server will return an access token back to the MVC client. Any further calls to resource servers (APIs) will be made using the access token. To achieve this I am using Microsoft.Owin.Security.OpenIdConnect and the UseOpenIdConnectAuthentication extension. I am able to successfully redirect and get the

Is Google the only OpenID provider that requires “identifier_select”?

匿名 (未验证) 提交于 2019-12-03 02:49:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am developing an OpenID consumer in PHP and am using the fantastic LightOpenID library ( http://gitorious.org/lightopenid ). Basing my code off of that found in the example client script I have successfully created a consumer. However, I've run across a snag: Google requires the openid.identity and openid.claimed_id to be set to "http://specs.openid.net/auth/2.0/identifier_select" (see here ). If I do that it works but other providers (i.e. AOL) don't. Here are my questions: identifier_select is required, contrary to the OpenID specs? Is

Why does the ID of Google's OpenID implementation change?

匿名 (未验证) 提交于 2019-12-03 02:49:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I'm trying to implement OpenId login for a web application. Whenever new user who logs in via OpenId I create a new user on the sustem, and among the data I store their openid URL, so that next time they login with that user. I'm testing this with my Gmail OpenID, and the problem is that everytime I do this, Google sends a different openid URL, that is, https://www.google.com/accounts/o8/id?id=SomethingThatChangesFromTimeToTime Of course I'm then not able to tell wheter this is or not a new user. I'm a bit puzzled: shouldn't the openid

OpenID Java [closed]

本小妞迷上赌 提交于 2019-12-03 02:40:25
问题 As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance. Closed 6 years ago . Is there an openID implementation in Java? I would like to use this in a tomcat application. 回答1: The openid4java library seems to be

OpenId with Desktop Application?

匿名 (未验证) 提交于 2019-12-03 02:31:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: We're using an API from a provider; in their next version, they would provide an OpenId server but mostly the users are using their desktop application. An other website we're building would be opened from this application and we supposedly would connect with openid to access the resources stored in this provider. Still I don't understand how this would work if user is already authenticated with the desktop, will they have to authenticate an other time ? What happens if they close their browser and reopen it, will they have to to do it again