openid

OpenID Over SSL with self signed certificate

删除回忆录丶 提交于 2019-11-30 07:26:46
I setup my own open id provider on my personal server, and added a redirect to https in my apache config file. When not using a secure connection (when I disable the redirect) I can log in fine, but with the redirect I can't log in with this error message: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. I'm guessing that this is because I am using a self signed certificate. Can anyone confirm if the self signed certificate is the issue? If not does anyone have any ideas what the problem is? The primary benefit of using SSL for your

OpenID endpoints

别来无恙 提交于 2019-11-30 07:14:33
I would like to allow users to log in into my website with OpenID. So far I have integrated Google and Yahoo. What other popular services are offering OpenID login endpoints? I'm particulary interested in Windows Live (but from what I've seen they recently closed the endpoint, and I couldn't find any information about new one). What about social websites, like Facebook or Twitter? I have seen the OpenID Directory but I didn't find any useful information. HerrVoennchen take a look what stackoverflow is offering. https://stackoverflow.com/users/login sadly no idea what urls you have to use, but

Using OpenID with WCF and no browser, is it possible?

安稳与你 提交于 2019-11-30 07:12:26
From most of the reading I've done on OpenID, it seems a browser may be required. I'm writing a WCF app and wanted to use OpenID as the authentication method, but my app is not a web app. Is it possible to use WCF and OpenID together without requiring a web browser? While OpenID can tout in its spec independence from cookies and such because the spec doesn't actually mandate how those things are used, in reality I've never seen a good OpenID solution for anything besides logging into a web site, which is really its primary use case. However there is a good way to go and still use WCF and

OpenID authentication and API access

拈花ヽ惹草 提交于 2019-11-30 06:38:27
问题 OpenID authentication is inherently browser based. If I wanted to allow an OpenID user to authenticate against an API for use in alternative clients, is there an accepted best practice for that? So if a user tried to log in with their OpenID into an iPhone app, for instance, how would that work? The only thing I can think of generating an API token of some sort for them and get the user to manually enter it somewhere. This approach is not user friendly. This is the way sites like Basecamp

Are there any security risks associated with me using OpenID as the authentication method on my site?

本小妞迷上赌 提交于 2019-11-30 06:37:54
问题 Is OpenID a secure method of authentication users on a website? And, if not, what are the security risks associated with OpenID? 回答1: Actually I always disliked OpenID for various reasons. I have to trust the OpenID provider who I gave my data. I do trust certain sides to certain degrees, but just because I may trust Stack Overflow, I don't automatically trust any of the well known OpenID providers. If my OpenID password is compromised, all my sites where I'm using OpenID are compromised.

Using a javax.servlet.Filter with Compojure

跟風遠走 提交于 2019-11-30 05:25:56
I'm trying to build a simple web site using Clojure / Compojure and want to feed apply a servlet filter to the request / response (i.e. a standard javax.servlet.Filter instance). e.g. if the current source code is: (defroutes my-app (GET "/*" (html [:h1 "Hello Foo!!"])) ) I would like to add a filter like this: (defroutes my-app (GET "/*" (FILTER my-filter-name (html [:h1 "Hello Foo!!"]))) ) Where my-filter-name is some arbitrary instance of javax.servlet.Filter. Any idea how to do this effectively and elegantly? mikera Ok I've now got this working! Thanks cgrand for the pointers in the right

Zend framework user authentication integration with Twitter and Facebook

为君一笑 提交于 2019-11-30 04:22:24
问题 Is there any script based on ZF, which supports normal user signup/login system, along with user authentication throuh Twitter and Facebook. 回答1: Have a look at An example of OpenID, Facebook and Twitter authentication in Zend Framework 1.11. Altough, the application does not show how to use normal user authentication (it was not the purpose of it) it shows one way of using OpenID (Google, Yahoo, MyOpenId, AOL, OpenId) as well as Facebook Connect and Twitter Oauth for authentication of users.

Google OpenId: No OpenID endpoint found (intermittent)

筅森魡賤 提交于 2019-11-30 04:21:54
问题 Usually using the Google OpenId works fine, thousands of times a day, then it will start intermittently going wrong and timing out for an hours or so (some requests will validate but not all). Repeated validation will eventually work. Error messages are: Event code: 200000 Event message: No OpenID endpoint found. : https://www.google.com/accounts/o8/id Sequence contains no elements Adding in log4net yields: DotNetOpenAuth.Yadis: Error while performing discovery on: "https://www.google.com

Active Directory as OpenID provider?

空扰寡人 提交于 2019-11-30 03:30:16
Can an Active Directory be used as a OpenID provider? WIF is an option, but it's quite complicated and not very widespread. Yes, you can. Just host an ASP.NET web site that itself uses Active Directory authentication, and exposes an OpenID Provider using DotNetOpenAuth. There is also OpenID-LDAP server which claims to work with AD LDAP. ADFS 4.0, available from Windows Server 2016 onwards, allows authentication using OpenID. Or you can use RedHat Keycloak, which leverages any LDAP or Kerberos Server as a repository to be used with OIDC or even with poor man's auth SAML. 来源: https:/

How to implement Openid connect and Spring Security

只谈情不闲聊 提交于 2019-11-30 02:24:16
I am beginner of authentication and authorization but I have to connect to a openid connect provider on my job. I know a little about how to use Spring Security. First, I got UserInfo object thanks by following nice direction. https://oauthssodemo.appspot.com/step/1 And then I found a great implementation named "spring-security-oauth" below. I could run the app on tomcat and connect to facebook successfully. https://github.com/SpringSource/spring-security-oauth As next step, I want to connect google by using "spring-security-oauth" but I do not know how to do that completely. (To be honest, I