Identifier_select response
Eddy Nigg (StartCom Ltd.)
eddy_nigg at startcom.org
Wed Feb 6 16:17:20 PST 2008
Hi Kevin,
After much trial and error (and lots of logging and debug printing) I
got it work. At least that's correct when using the example consumer at
openidenabled.com. At this stage my thanks for providing this service
which allows us to check server implementations etc!
One thing however I must clarify here. Why does the consumer use the
openid.claimed_id field for discovering the second step (for XRDS) and
not the openid.identity? I expected the openid.identity field to be
authoritative and not openid.claimed_id! This looks somehow not really
correct to me...
You can check this by sending different values at the id_select stage,
where openid.claimed_id isn't the same as openid.identity with
openid.identity the only correct value for discovery.
Kevin Turner wrote:
> On Wed, 2008-02-06 at 22:45 +0200, Eddy Nigg (StartCom Ltd.) wrote:
>
>> At this stage the RP sends this: [openid_claimed_id] =>
>> http://specs.openid.net/auth/2.0/identifier_select
>>
>> How do you know that the claimed_id field is supposed to be
>> "http://kevin.janrain.com/"?
>>
>
> Because you asked me which of my identifiers I wanted to use, and I
> picked that one. For an example of this in the wild, see Yahoo!'s
> implementation, which will let you choose between a yahoo.com identifier
> and a www.flickr.com identifier.
>
> The more common case, as is the current implementation on myOpenID, is
> for the claimed identifier and the local identifier (openid.identity) to
> be the same.
>
>
>
>> OK, slowly now. First the xrds sends "Auth_OpenID_TYPE_2_0_IDP".
>>
>
> The XRDS for myopenid.com sends that type, the "this URL is an OP."
> The XRDS for keturn.myopenid.com sends the other type, "this URL is an
> OpenID Identifier."
>
>
>
>
> _______________________________________________
> Dev mailing list
> Dev at lists.openidenabled.com
> http://lists.openidenabled.com/mailman/listinfo/dev
>
--
Regards
Signer: Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber: startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: Join the Revolution! <http://blog.startcom.org>
Phone: +1.213.341.0390
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openidenabled.com/pipermail/dev/attachments/20080207/235d2dfd/attachment.htm
More information about the Dev
mailing list