[OpenID] Flash based authentication?

Peter Serwylo peter at serwylo.com
Fri Mar 20 03:36:21 UTC 2009


On Thu, 2009-03-19 at 18:23 -0700, SitG Admin wrote:
> >I've had a good browse around the web and this list, but cannot seem
> to
> >find much reference at all (other than a fleeting reference in
> >discussions about phishing or other security concerns) to using
> OpenID
> >from a flash client.
> 
> 
> Chris Messina posted a few links recently:
> 
> 
> http://anirudhs.chaosnet.org/blog/2009.02.17.html
> 
> http://anirudhsasikumar.net/examples/openidlogin/

Yeah thanks for that.
This is the one reference I have seen to someone using OpenID in a flash
context (and even better for me, a flex component).
However, the live example he has I can't seem to get to load properly in
my browser, and the demo says this upon submission of my identity:

"Ideally, this is the handler where you send "ivt.com.au/openid/peter"
for discovery to your backend. You could then call
OpenIDLoginWindow.closeLogin(), use the response from discovery along
with ExternalInterface.call() to communicate this URL with javascript so
that the browser window is redirected there."

The key phrase being "so that the browser window is redirected there",
which will:
a) break my requirement for not destroying the flash session (need to
keep the player instance open so that everything stays in memory).
b) Quite possibly cause problems with pop-up blockers.

cheers,
Pete






More information about the general mailing list