[OpenID] ANN: OpenID4Java 0.9.4 - OpenID draft 12 and AX draft7 support

Peter Williams pwilliams at rapattoni.com
Mon Oct 1 21:31:39 UTC 2007


I think you want a reference implementation of the protocol engine and extensions framework, not end systems.
 
The library would showcase how its architecture embodies the design principles in the spec. For example: how it embodies the specs artifacts for extensibility, how the API is tuned for supporting connectionless transports, how the messaging ideally ought to support web services in addition to its browsers...
 
If one looks at Marhall Rose's implementation of MIME in MH, it aligns with the spec and reinforces just why the spec has the design point it does ... so your implementation can grow and capature the full vision of the movement.
 
If an OpenID lib is supposed to participate in the Microsoft world of cliam transformers, then so be it: the reference code showcases how one cooperates in that world too.

________________________________

From: general-bounces at openid.net on behalf of Johnny Bufu
Sent: Mon 10/1/2007 2:22 PM
To: Eddy Nigg (StartCom Ltd.)
Cc: OpenID List
Subject: Re: [OpenID] ANN: OpenID4Java 0.9.4 - OpenID draft 12 and AX draft7 support




On 30-Sep-07, at 4:47 AM, Eddy Nigg (StartCom Ltd.) wrote:

> How about providing a complete client and server implementation 
> with all the whistle and bells which could be configured in a 
> config or from DB? I could imagine that once something installable 
> would be available, it actually would be used much more (including 
> sql scripts etc). I could also imagine, to provide some hooks for 
> popular forums and blogs, i.e. redirect authentication to the 
> OpenID4Java client and post the result back...
>
> Specially the availability of extensions like Attribute Exchange 
> could improve the (security) status of OpenID further, meaning that 
> actual implementations are using it.

There are a few things to play with:

- samples/simple-openid/ : A simple JSP-only implementation, for 
someone who wants to see openid4java in action quicly, and/or test 
against other implementations.

- samples/demorp/ : A full-blown, deployable RP. Pretty much all the 
configuration options allowed by the library can easily be tweaked in 
the Spring configuration files under WEB-INF.


An OP with all the bells and whistles is not that easy to do; 
requirements and configuration can vary greatly, so a reference 
implementation is not that straight-forward to build. There are 
however a couple initiatives I know of:

Sutra Zhou is building an OP:
        http://code.google.com/p/openid-server/

David Fuelling was also writing working on fully featured OP and 
planned to put under the openid4java project when complete; not sure 
where he's at.


Hope this helps,
Johnny

_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general





More information about the general mailing list