openid

Authentication using any OpenID with Tipfy

拟墨画扇 提交于 2019-11-30 02:23:49
I am developing the authentication part of my app and I've run into issues with coding authentication using OpenID. I've looked at the Tipfy example code, but it seems written under the assumption that the OpenID provider is hard-coded to google. I would like the user to be able to provide any OpenID they desire (isn't that the point?). Does anyone have any example code that shows a user logging in using a user-supplied OpenID? Does Tipfy allow any OpenID authentication? If you want to authenticate any OpenID Url with Tipfy, you can't do it out of the box. One main reason is because Tipfy does

OpenID authentication in Ruby on Rails

谁说胖子不能爱 提交于 2019-11-30 01:40:50
I am a neophyte with Ruby on Rails but I've created a couple of small apps. Anyway, I'm really interested in OpenID and I would like to implement OpenID authentication and maybe some Sreg stuff in a Rails app. All of the research that I have done has come up with articles that are out of date or just don't work for me. Since I'm so new to Rails I'm having difficulty debugging the issues so... What is the best way to implement OpenId in Rails? Have you watched Ryan Bates' excellent Railscast on OpenID Authentication? I can recommend AuthLogic for OpenID: http://www.binarylogic.com/2008/11/21

Performing Google Federated Login/oAuth2 after initial Authentication

删除回忆录丶 提交于 2019-11-30 01:19:08
问题 I am trying to support "Hybrid" Federated Login and oAuth2 (using logic from this document) for a webservice which will: support Sign in using your Google account on my site. That is, from the documentation: You can also choose to use Google's authentication system as a way to outsource user authentication for your application. This can remove the need to create, maintain, and secure a username and password store . Access the user's Google Analytics. Here are the steps I have done. I form my

微信小程序注意点

隐身守侯 提交于 2019-11-30 00:48:56
wx.getStorage不能和wx.request同步, 应该将wx.getStorage获取的数值后在success里面直接执行wx.request,不然获取不到值 ps:代码(wx.获取手机授权) getPhoneNumber: function(e) { var openid; var session_key; var that = this; wx.getStorage({ key: 'openid_and_session_key', success(res) { console.log(res.data) openid = res.data.openid; wx.request({ url: 'https://oanew.zhizaolian.com/outwork/decryptData', data: { encryptedData: e.detail.encryptedData, iv: e.detail.iv, sessionKey: res.data.session_key, }, method: "post", success: function(res) { console.log(res); wx.request({ url: 'https://oanew.zhizaolian.com/outwork/save', data: { phone: res

转载:微信开放平台开发第三方授权登陆(二):PC网页端

|▌冷眼眸甩不掉的悲伤 提交于 2019-11-30 00:41:06
微信开放平台开发第三方授权登陆(二):PC网页端 2018年07月24日 15:13:32 晋文子上 阅读数 12644 更多 分类专栏: 微信开发 第三方授权登录 版权声明:本文为博主原创文章,遵循 CC 4.0 BY-SA 版权协议,转载请附上原文出处链接和本声明。 本文链接: https://blog.csdn.net/qq_34190023/article/details/81185143 微信开放平台开发系列文章: 微信开放平台开发第三方授权登陆(一):开发前期准备 微信开放平台开发第三方授权登陆(二):PC网页端 微信开放平台开发第三方授权登陆(三):Android客户端 微信开放平台开发第三方授权登陆(四):微信公众号 微信开放平台开发第三方授权登陆(五):微信小程序 目录 一、需求 二、开发流程 1.网站应用:(微信客户端扫码授权登陆) 三、开发使用的技术及工具 四、具体实现步骤 1、网站应用 1)请求获取Code 2)用户同意授权与否 3)获取access_token 4)通过access_token调用接口获取用户个人信息(UnionID机制) 5)刷新access_token 五、测试结果 1、网站应用 六、应用关键参数位置 微信开放平台第三方授权登陆开发文档(PC网页端) 当 微信开放平台开发第三方授权登陆(一):开发前期准备 完成后

微信公众号web开发网页授权获取openid正式公众号不需要关注

血红的双手。 提交于 2019-11-30 00:36:48
一、介绍 一个项目要求是我们作为第三方开发一个基于微信浏览器的项目,需要使用微信的openid作为我们项目的唯一id,但是客户不想开发一个页面获取针对于他们公众号的openid,我们只能在页面上获取我们自己公众号的openid,在不需要用户关注我们公众号的前提下获取到openid。 二、进行网页授权配置 微信网页授权文档描述: 详见: https://developers.weixin.qq.com/doc/offiaccount/OA_Web_Apps/Wechat_webpage_authorization.html 文档描述比较详细; 注意: 1、只针对于拥有权限的公众号类型:服务号;订阅号没有权限; 2、正式的微信公众号获取code时不需要用户关注公众号就可以直接获取,测试公众号需要关注之后才能正常获取,官方没有明说,我手边刚开始也没有正式公众号做测试,就一直没办法实现不关注公众号直接获取code的操作,坑的一批。 来源: https://blog.csdn.net/ykqwill/article/details/100933413

java实现QQ登陆

爷,独闯天下 提交于 2019-11-30 00:26:46
———————————————— 转发声明:本文为转载文章,至CSDN博主「有酒醉三生丶」转载 原文链接:https://blog.csdn.net/qq_37618797/article/details/90344835 一.准备工作 1.云服务器 2.备案的域名 3.本地调试需要修改hosts文件,将域名映射到127.0.0.1 一、申请QQ互联,并成为开发者 QQ互联:https://connect.qq.com/index.html 登录后,点击头像,进入认证页面,填写信息,等待审核。 审核通过后,点击创建应用 审核通过后,就可以使用APP ID 和 APP Key 二、编写java代码 github:https://github.com/sansheng741/QQLogin 项目结构 yml配置 server: port: 80 qq: oauth: http: //QQ互联中填写的网站地址 导入pom依赖 <!--httpclient--> <dependency> <groupId>org.apache.httpcomponents</groupId> <artifactId>httpclient</artifactId> <version>4.5.6</version> </dependency> <!--阿里 JSON--> <dependency>

What should I pass for the WWW-Authenticate header on 401s if I'm only using OpenID?

故事扮演 提交于 2019-11-29 23:45:33
The HTTP spec states: 10.4.2 401 Unauthorized The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.47) containing a challenge applicable to the requested resource. If the only login scheme I support is OpenID (or CAS, or OAuth tokens, &c.), what should I put in this field? That is, how do I indicate that the client needs to pre-authenticate and create a session rather than try to send credentials along with each request? Before you answer, "don't send a 401; send a 3xx redirecting to the OpenID login page," what about for non-HTML

Database Schema for multiple authentications, Facebook Connect, Twitter, OpenID, etc

 ̄綄美尐妖づ 提交于 2019-11-29 23:35:15
I am building an application that I want to interface with Facebook Connect, Twitter, OpenID, and potentially other social networks. Users will be able to login using any number of these methods at the same time. My application uses MySQL as a backend database. Can someone give me guidance on what my db schema should look like for capturing user info from various social networks at the same time? One idea I have (based on my reading online) is something like: User {userid, ...} UserFacebook {fbid, userid, ...} UserTwitter (twid, userid, ...} etc., etc. Then to get a complete picture of a user

OAuth? ,OpenID? Neither? Which one should my site support?

我的未来我决定 提交于 2019-11-29 22:24:01
I working on a new website and wanted some advice/feedback on OAuth vs OpenID vs Standard site owned username/password. You may want to read this article by Malcom Tredinnick which explains what openid and oauth are, and do. They serve different purposes. In summary, openid would be used to uniquely identify users - it's an identity solution. oAuth would provide a means to interact with data that your site's users have access to by allowing the user to grant your site temporary access to external services, their flickr account, for example - it's an authorization tool. Offering only the