Questions tagged [openid]

OpenID is an open standard that describes how users can be authenticated in a decentralized manner. It allows the user to use an existing account to sign in to multiple websites, without needing to create new passwords.

OpenID is an open standard that describes how users can be authenticated in a decentralized manner, eliminating the need for services to provide their own ad hoc systems and allowing users to consolidate their digital identities. Users may create accounts with their preferred OpenID identity providers, and then use those accounts as the basis for signing on to any website which accepts OpenID authentication

- Wikipedia

3669 questions
34
votes
2 answers

What should I pass for the WWW-Authenticate header on 401s if I'm only using OpenID?

The HTTP spec states: 10.4.2 401 Unauthorized The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.47) containing a challenge applicable to the requested resource. If the only login…
James A. Rosen
  • 64,193
  • 61
  • 179
  • 261
34
votes
3 answers

App Engine - Intermittent 500 errors on /_ah/openid_verify

I'm getting intermittent errors when logging into my app with the Google openid. The link they are sent to is…
Kyle
  • 21,377
  • 37
  • 113
  • 200
34
votes
6 answers

Is there an openID implementation in Java?

Is there an openID implementation in Java? I would like to use this in a tomcat application.
Milhous
  • 14,473
  • 16
  • 63
  • 82
34
votes
4 answers

What OpenID Connect authorization flow to authenticate mobile app users?

I am building a cross-platform mobile app that interacts with a RESTful API, and I want to use OpenID Connect to authenticate my users. I will be building my own OpenID Connect provider server. OpenID.net claims that: OpenID Connect allows for…
PGleeson
  • 381
  • 1
  • 3
  • 9
34
votes
4 answers

OAuth 2 access_token vs OpenId Connect id_token

Although I have worked with OAuth 2 before, I am a newbie to Open ID Connect. Reading the tutorials and documentations I have come across both access_token and id_token where access_token is the random unique string generated according to OAuth 2…
ajaybc
  • 4,049
  • 7
  • 44
  • 57
33
votes
3 answers

How to use OpenID in RESTful API?

I'm building Pylons-based web application with RESTful API, which currently lacks any authentication. So I'm going to implement that and in order to avoid all the trouble and caution with storing user passwords, I'd like to use OpenID for…
Pēteris Caune
  • 43,578
  • 6
  • 59
  • 81
32
votes
3 answers

OpenID Connect delegation with Google now that they are deprecating their OpenID2 provider?

For years I have used OpenID delegation to log in to Stack Overflow (among other sites) using my own URI as OpenID but having Google handle the authentication. I use the technique described in this Stack Overflow question; so, my custom OpenID…
Robert Tupelo-Schneck
  • 10,047
  • 4
  • 47
  • 58
31
votes
5 answers

How to get Uri.EscapeDataString to comply with RFC 3986

The Uri class defaults to RFC 2396. For OpenID and OAuth, I need Uri escaping consistent with RFC 3986. From the System.Uri class documentation: By default, any reserved characters in the URI are escaped in accordance with RFC 2396. This…
Andrew Arnott
  • 80,040
  • 26
  • 132
  • 171
31
votes
9 answers

How do you enable customers use their openid on your website, just like stackoverflow?

I want customers to use their openId on my site. I googled for this but didn't find any good tutorial. I use PHP and MySQL. There is one at Plaxo. But it says we should download something from JanRain.com. I saw the openId module of Drupal. It…
Abdulsattar Mohammed
  • 10,154
  • 13
  • 52
  • 66
31
votes
4 answers

Webservice credentials - OpenID/Android AccountManager?

I'm building a webservice and would like to use the user's google account credentials. The service runs on GAE and will have a web client and an Android native client. This is my first attempt of something like this and I've been reading about…
Tomer Weller
  • 2,812
  • 3
  • 26
  • 26
30
votes
4 answers

What's the best .NET library for OpenID and ASP.NET MVC?

I'm looking at using OpenID for my authentication scheme and wanted to know what the best .NET library is to use for MVC specific applications? thx
Mr. Kraus
  • 7,885
  • 5
  • 28
  • 33
30
votes
5 answers

Which openid / oauth library to connect a django project to Google Apps Accounts?

I'm working on an intranet django project (not using GAE) for a company that uses Google Apps for login. So I'd like my users to be able to log in to my django project using their google accounts login. OpenID seems appropriate, although maybe…
Leopd
  • 41,333
  • 31
  • 129
  • 167
29
votes
4 answers

django authentication without a password

I'm using the default authentication system with django, but I've added on an OpenID library, where I can authenticate users via OpenID. What I'd like to do is log them in, but it seems using the default django auth system, I need their password to…
voodoogiant
  • 2,118
  • 6
  • 29
  • 49
29
votes
5 answers

Is there a Spring Security OpenId Registration like stackoverflow?

I cannot find a complete example anywhere of a Spring Security Web App with Open Id registration similar to stackoverflows. I would say I'm pretty techy guy but I find Spring Security extremely intimidating with its weird Spring XML DSL. I have…
Adam Gent
  • 47,843
  • 23
  • 153
  • 203
29
votes
1 answer

Using OpenID (via DotNetOpenAuth) along with user roles and other Membership Provider features

I'm building an ASP.NET MVC site where I want to use DotNetOpenAuth to implement OpenID login (I'm completely dropping username/password-based login). So far, I've been writing my code for the default username/password system with the ASP.NET…
Maxim Zaslavsky
  • 17,787
  • 30
  • 107
  • 173