[OpenID] CheckIDRequest with Big AX
Pat Cappelaere
pat at cappelaere.com
Tue Dec 30 16:24:27 UTC 2008
Dick,
On Dec 30, 2008, at 10:59 AM, Dick Hardt wrote:
>
> On 30-Dec-08, at 5:25 AM, Pat Cappelaere wrote:
>
>> I think that AX is used in its designed role here.
>> The user grants access to his information.
>> The SP ought to be free to access that information at anytime and
>> update/store stuff at anytime, right?
>
> If you don't want the user to be in the loop, then the RP and OP can
> talk directly.
>
Are you saying the RO could POST a FetchRequest directly to the OP and
get the whole data back within the channel created between the two
entities?
Or are you saying: "Do it on your own outside OpenID"?
> The model does assume that the RP could ask for the information each
> time the user goes to the site, and a smart OP will allow the user
> to check a box to allow the information to be sent each time. Same
> for storing information.
>
> Not sure why the user is getting a button they have to click on
> unless JavaScript has been disabled.
>
Hummmm.... I do not see any javascript anywhere on that page So
someone has to click that button.
How is this supposed to work?
The OP generates a form on the fly and some javacript automatically
submits that form to the RP?
Thanks,
Pat.
More information about the general
mailing list