[OpenID] ANN: OpenID4Java 0.9.4 - OpenID draft 12 and AX draft 7 support
Johnny Bufu
johnny at sxip.com
Mon Oct 1 21:22:58 UTC 2007
On 30-Sep-07, at 4:47 AM, Eddy Nigg (StartCom Ltd.) wrote:
> How about providing a complete client and server implementation
> with all the whistle and bells which could be configured in a
> config or from DB? I could imagine that once something installable
> would be available, it actually would be used much more (including
> sql scripts etc). I could also imagine, to provide some hooks for
> popular forums and blogs, i.e. redirect authentication to the
> OpenID4Java client and post the result back...
>
> Specially the availability of extensions like Attribute Exchange
> could improve the (security) status of OpenID further, meaning that
> actual implementations are using it.
There are a few things to play with:
- samples/simple-openid/ : A simple JSP-only implementation, for
someone who wants to see openid4java in action quicly, and/or test
against other implementations.
- samples/demorp/ : A full-blown, deployable RP. Pretty much all the
configuration options allowed by the library can easily be tweaked in
the Spring configuration files under WEB-INF.
An OP with all the bells and whistles is not that easy to do;
requirements and configuration can vary greatly, so a reference
implementation is not that straight-forward to build. There are
however a couple initiatives I know of:
Sutra Zhou is building an OP:
http://code.google.com/p/openid-server/
David Fuelling was also writing working on fully featured OP and
planned to put under the openid4java project when complete; not sure
where he's at.
Hope this helps,
Johnny
More information about the general
mailing list