[jira] Commented: (JSPWIKI-94) OpenID support

["Tilman Bender (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/JSPWIKI-94?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12675854#action_12675854 ] 

Tilman Bender commented on JSPWIKI-94:
--------------------------------------

Just to make sure: Wa are talking about OpenID Authentication 2.0 right?

If so, Harry, I think your research on who decides what OpenID Provider (OP) to use is not fully correct.
As far as I can see the decision which provider to use is made by the relying party (RP), that would be JSPWiki in our case.

Concering the questions whether you can define multiple OPs and an order:
AFAIR you can. But only when using XRDS-Based discovery (not HTML-Based discovery), because in a XRDS-Document you can define multiple services and their priority.

"Can the consumer control which OP's to allow and which ones not."
I think this is what they call whitelisting. It is not really recommended because it would be a bit of stopper for OpenIDs decentralization.

I must admit though, that the last question is also one of the parts about OpenID, which I don't fully understand by now. 

You can find my bookmarks on it here: http://delicious.com/FuzzyFrog/openid



> OpenID support
> --------------
>
>                 Key: JSPWIKI-94
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-94
>             Project: JSPWiki
>          Issue Type: New Feature
>          Components: Authentication&Authorization
>            Reporter: Janne Jalkanen
>            Priority: Minor
>             Fix For: 3.1
>
>
> Now that OpenID2.0 is launched, we should look seriously into enabling that as a way to manage your JSPWiki identity.
> http://openid.net/2007/12/05/openid-2_0-final-ly/
> I don't want to put any specific version on this item - it'll come when someone is motivated enough to make it work ;-).  But it's a good idea to keep here so that we don't forget about it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.