[OpenID] opensource library
Peter Williams
pwilliams at rapattoni.com
Wed Jun 4 09:57:13 UTC 2008
I approached what you are after by looking in detail at saml servers, rather than yet more openid code. There is little difference between the two protocols in practical outputs, and I recognized that the saml spec was clearly an expression of a type system specified to generically expess the processing requirements. This focus on type theory contrasts with openid quite properly - as its a natural contrast between securty engineering designed for assurance vs software engineering designed to be a lightweight use of processing resources.
So don't let this become a critique of openid for being excellent at doing what its supposed to do! Perhaps do reflect on the rsa fim server documents (to see how j2ee architecture expresses the saml spec's type system) or the shib/opensaml source (to see how the c classes interplay to express yet more than does the saml spec: how to build a server framework for secured, plug and play web services)
-----Original Message-----
From: James Tindall <james at atomless.com>
Sent: Wednesday, June 04, 2008 2:20 AM
To: general at openid.net <general at openid.net>
Subject: [OpenID] opensource library
Hello all,
I'm trying to write an opensource OpenId (Relying Party) library for an
opensource php framework called kohana.
I've been following the Janrain php library because it seemed the most
comprehensive and full featured but I was wondering if there were other
libraries out there that are as complete as the Janrain library but
possibly a little cleaner? The focus with the Janrain library seems to
have been to cover as many use senarios as possible and to include
everything needed including session handling - but this has meant that
the codebase is not at all transparent. As a programmer/web-developer
picking apart other libraries is often the best way to get an
understanding of how to write code to handle certain tasks. I've looked
at just about all of the libraries listed on the openid.net wiki but
have not as yet found one that is both feature complete and clean and
clearly coded.
Any suggestions of any helpfull resouces would be much appreciated!
James
_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general
More information about the general
mailing list