OpenID#
External sources#
openid4java | openid4java API | Interesting article on ServerSide.com |
| A Recipe for OpenID-Enabling Your Site | Beginners Guide | - |
| OpenID enabled sites | Public OpenID providers | - |
The OpenID book | OpenID demo build | - |
Questions I currently have.#
- Who decides, and how, which OP to use for authentication, is it the OpenID-enabled website, or is the user logging in (I would guess the first one)
- answer: -
- If the website decides which OP to use, can you configure multiple OP's, and an order ?
- answer: Nope, the user's OpenID URL points to a webpage, this page contains the following HTML element:
<link rel="openid.server" href="http://www.myopenid.com/server" /> <link rel="openid2.provider" href="http://www.myopenid.com/server" />This determines where the consumer should ask for authentication.
- Can the consumer control which OP's to allow and which ones not. (you could operate your own malicious OP , ne ?)