openid

no such file to load -- openid/extensions/sreg

I'm running ruby 1.8.6 and rails 2.3.2 on Mac OS X 10.5.6. I'm trying to get ruby script/server to work... I've waded through mysql and imagemagick installation, and I'm now faced with the following error: => Booting Mongrel => Rails 2.3.2 application starting on http://0.0.0.0:3000 /Library/Ruby/Site/1.8/rubygems/custom_require.rb:31...

How do I use OpenID in my new ASP.NET website?

I must be stupid, because all the articles I've seen on OpenID in ASP.NET have simply confused me on the issue. I'm pretty sure I understand the concepts involved here, I'm just a little fuzzy on how things look on the back end side of things. So a new user comes to my website and wants to create an account. Here comes the flood of qu...

How do I implement Direct Identity based OpenID authentication with Zend OpenID

Hi Guys, I'm using the Zend framework and the openid selector from http://code.google.com/p/openid-selector/ - however I find I can't login using sites like Google and Yahoo as they use direct identity based login system whereby one is just redirected to a url as opposed to entering a unique url of their own for authentication. I've che...

OpenID development and debugging tools

Any pointers to development, primarily debugging tools, for OpenID? In particular, I'm looking for a tool to record and view the OpenID traffic through the User-Agent during an indirect communication authentication session. An OpenID provider and relying party that offered debugging info about authentication attempts would be nice, too...

DotNetOpenId ClaimedIdentifier - Is it safe to hard-code this?

Hi all, I'm trying to make use of OpenID to allow me to login to my website via Google. Eventually it'll be used by visitors, but for now it's simply hard-coded as Google to verify my own login only. My code looks like this: var openId = new OpenIdRelyingParty(); // If we have no response, start if (openId.Response == null) { // ...

Max length of an openID

I'm planning to add openid support for a web application I'm building. I can't seem to find the maximum length of a valid openid so I can store it in my database. I've seen some vague references to 255 but I'd rather be sure. In addition is it useful to use the openid as the username (recommendations)? ...

Using Javascript OpenID Selector with Rails

Based on this article, it seems like SO is using Javascript OpenID Selector (JOIS) to handle OpenID logins in its "view". I love the simple interface and I would like to use it in a Rails project. I know that RPX would probably be the easier choice, but I'd like to build this on my own. Can you help me find answers to a few question...

Modifying LDAP schema to support Cardspace and OpenID

I am seeking examples of how others have modified LDAP schemas to support Cardspace and/or OpenID. Links to LDIFs or other documentation is greatly appreciated. ...

RememberMe with DotNetOpenId in ASP.NET MVC

Using DotNetOpenAuth 3 in ASP.NET MVC and implementing a RememberMe facility ... I'm finding that even if I set createPersistentCookie to true in FormsAuthentication.RedirectFromLoginPage and FormsAuthentication.SetAuthCookie the user is not remembered once the ASP.NET session times out. If I inspect the cookie I find it is marked as ...

Does OpenId support Ajax login?

Hi guys, I plan to use OpenId with my project, it will be cool if I can authenticate the user to openId provider through Ajax. I am not sure weather it is possible? ...

How to be an OpenID consumer?

Does anybody know or have any documents which I can use to build a site that consume OpenID? For example when user come to my site I accept an OpenID, then I will redirect them to OpenID provider, then when they are authenticated then they will be redirected back. I just want to know is there any steps or standard URLs to be used? ...

How might a site like Stack Overflow pass user information around in ASP.NET MVC?

Basically, I log into my website using OpenId, very similar to what I am assuming SO does. When I get the information back, I throw it into a database and create my "Registered User". I set my AuthCookie: FormsAuthentication.SetAuthCookie(user.Profile.MyProfile.DisplayName, false); Then I can use this for the User Name. However, I ...

Open Id XRDS Discovery

I am working with Open Id, just playing around making a class to interact / auth Open Id's on my site (in PHP). I know there are a few other Libraries (like RPX), but I want to use my own (its good to keep help better understand the protocol and whether its right for me). The question I have relates to the Open Id discovery sequence. Ba...

OpenID and Its Flaws

What are the security flaws of OpenID? ...

Ruby-OpenID: Requiring email-address from OpenID provider

I'm playing with the authlogic-example-app and I'm failing to get the email address from the OpenID provider (in my case: Google and Yahoo) when I register a user, resp. I get an empty response instead of an email address (check the comments in code below). This is how my user model looks like (everything else looks like the "with_openi...

OAuth? ,OpenID? Neither? Which one should my site support?

I working on a new website and wanted some advice/feedback on OAuth vs OpenID vs Standard site owned username/password. ...

How do I implement an OpenID consumer in my Google App Engine project?

I want to use OpenID in my Java Google App Engine web application but I don't know where to start... I have looked at openid4java and joid. openid4java says you have to place some libraries on the "endorsed libraries"-path. I don't have one locally on my computer, and I sure don't know how to do that on Google App Engine. joid looks ...

Would a login system based on digital signing be a good idea?

One of the goals of OpenID is to be resistant against the failure of any one corporation. This sounds good, but there is another problem: if the site your ID is hosted on goes down, so does your ID. I thought that there must be a login system that would be totally resistant to failure. My idea is like this: I go to a website and I have ...

Compliance test for OpenID providers

What automated standards-conformance tests are there for OpenID providers? I'm making changes to the implementation of an OpenID provider, to bring it from version 1.1 of the standard to version 2.0. Before releasing the code, I want to be sure that it conforms to the specifications of the standard. For testing web standards compliance...

OpenID Login Helper Buttons

Is there an easy way to implement OpenID login "helper buttons" similar to the buttons on the stackoverflow and uservoice login pages if you're already using a library like DotNetOpenId? It looks like RPX solves half of the problem, but it would require re-implementing the login code to use their methods. ...