[OpenID] Openidsamplestore

[Chris Messina]

To the best of my knowledge, yes — the logic ignores whatever precedes the
domain and relies solely on what the IDP returns (or else
jernst at gmail.com(your real account) could login as
chris.messina at gmail.com by typing that in the box and associating whatever
identifier the IDP returns with what you typed in the box).

In other words, what you type is only used as a suggestion as to who your
IDP is — it's up to your IDP to assert the identity of the current/active
user.

Chris


On Sun, Jan 23, 2011 at 1:08 PM, Johannes Ernst <jernst+openid.net@
netmesh.us> wrote:

> Playing around with Google's OpenIdSampleStore.com:
>
> I "sign up" with foo at gmail.com.
> The popup comes up asking me to confirm the login into
> openidsamplestore.com for my account johannes.ernst at gmail.com (I'm
> currently logged into Google).
>
> Does it simply ignore user "foo" that I entered in favor of my current
> Google session? Why would it do that? Simply a bug or something I don't
> quite understand?
>
> The openidsamplestore at googlegroups.com mailing list seems dead, so I'm
> posting this here.
>
> Cheers,
>
>
>
> Johannes.
>
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general
>



-- 
Chris Messina
Open Web Advocate, Google

Website: http://chrismessina.me
Blog: http://chrismessina.me/b
Follow my updates: http://twitter.com/chrismessina

This email is:   [ ] shareable    [X] ask first   [ ] private
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20110123/2b9b6016/attachment.html>