OpenID Connect Support

["Hoefer, Filip" <fi...@atos.net>]

Hello,

I would like to ask what is the status of OpenID Connect support in Oltu. Is it already possible to build Oltu-based IDPs and RPs? Are there any examples?

Kind regards,

    Filip Hofer

RE: OpenID Connect Support

["Hofer, Filip" <fi...@atos.net>]

Hi Mark,

Code snippets would be welcome.

Many thanks in advance

   Filip Hofer

From: Mark Rose (ARC-TI)[Stinger Ghaffarian Technologies Inc. (SGT Inc.)] [mailto:mark.rose@nasa.gov]
Sent: Wednesday, May 14, 2014 12:14 AM
To: <us...@oltu.apache.org>
Subject: Re: OpenID Connect Support

On May 13, 2014, at 12:43 PM, Antonio Sanso wrote:


I would like to ask what is the status of OpenID Connect support in Oltu. Is it already possible to build Oltu-based IDPs and RPs?

So for OIDC I am afraid the answer is no. It would be yes for plain OAuth 2.

I have been able to implement an OIDC connect RP with Google as the IDP by using OpenID Connect scopes, extracting the ID token as an attribute from the response of the token endpoint, and then using the JWT classes to parse the ID token. So I've been able to use Oltu to do the authentication, but have not used the OpenID Connect Oltu classes.

If you're interested, I can send some code snippets. (I wrote some classes to hide whether OAuth or OpenID connect is used and parameterize the scopes and some endpoints, so that we can use IDPs that don't yet support OpenID Connect or discovery. I can't release all of that code, but I can send enough to give you the info.)

Mark
--
Mark Rose

Mark.Rose@nasa.gov<ma...@nasa.gov>
NASA Ames Research Center / Dell Federal Services
925.922.7263

Re: OpenID Connect Support

["Mark Rose (ARC-TI)[Stinger Ghaffarian Technologies Inc. (SGT Inc.)]" <ma...@nasa.gov>]

On May 13, 2014, at 12:43 PM, Antonio Sanso wrote:

I would like to ask what is the status of OpenID Connect support in Oltu. Is it already possible to build Oltu-based IDPs and RPs?

So for OIDC I am afraid the answer is no. It would be yes for plain OAuth 2.

I have been able to implement an OIDC connect RP with Google as the IDP by using OpenID Connect scopes, extracting the ID token as an attribute from the response of the token endpoint, and then using the JWT classes to parse the ID token. So I've been able to use Oltu to do the authentication, but have not used the OpenID Connect Oltu classes.

If you're interested, I can send some code snippets. (I wrote some classes to hide whether OAuth or OpenID connect is used and parameterize the scopes and some endpoints, so that we can use IDPs that don't yet support OpenID Connect or discovery. I can't release all of that code, but I can send enough to give you the info.)

Mark
--
Mark Rose
Mark.Rose@nasa.gov<ma...@nasa.gov>
NASA Ames Research Center / Dell Federal Services
925.922.7263

Re: OpenID Connect Support

[Antonio Sanso <as...@adobe.com>]

hi,

this part of the project is really at initial stage and a lot need to be done.


On May 13, 2014, at 3:10 PM, Hoefer, Filip <fi...@atos.net>> wrote:

Hello,

I would like to ask what is the status of OpenID Connect support in Oltu. Is it already possible to build Oltu-based IDPs and RPs?

So for OIDC I am afraid the answer is no. It would be yes for plain OAuth 2.

regards

antonio

p.s. contributions are welcome :)

Are there any examples?

Kind regards,

    Filip Hofer