Proposal for discovery of an OpenID session at an OP

[Allen Tom]

Hi Peter - 

Sorry, I think I missed your December post. (I'm having horrific problems
with spam)

If I understand your suggestion correctly, you're asking for an interface
for RPs to determine if the user is currently logged into their OP. This
will allow the RP to customize it's OpenID Call to Action to emphasize the
OP[s] that the user is currently signed into.

Is this correct?

If so, the current draft of the OpenID User Interface Extension actually has
this interface documented in the Appendix. (We should definitely move it out
of the Appendix and properly document it)

See the experimental x-has-session parameter in Appendix A:

http://svn.openid.net/repos/specifications/user_interface/1.0/trunk/openid-u
ser-interface-extension-1_0.html#anchor11

I'm pretty sure that the Google OP supports this interface. I'm hoping that
the Yahoo OP will be able to support it too, however there might be some
privacy issues that have to be sorted out first.

Thanks
Allen



On 1/21/10 8:31 PM, "Peter Watkins" <peterw at tux.org> wrote:

> All,
> 
> I would appreciate any suggestions on how to put forth suggestions for
> serious consideration, as my last attempt was such a failure.
> 
> Was my December proposal** really so bad (or badly written?) as to
> merit no on-list responses whatsoever? One of you was kind enough to
> send a note off-list (thanks!), but I am disappointed in the complete
> lack of responses -- after all, I thought I was outlining a path
> toward solving some problems & concerns raised by a wide variety of
> folks on this list, including Luke Shepard at Facebook, Drummond Reed,
> Dick Hardt, and others.
> 
> What does it take for an idea to get some attention around here??
> 
> Thanks,
> 
> Peter
> 
> **http://lists.openid.net/pipermail/openid-specs/2009-December/006358.html
> 
> Peter Watkins wrote:
>> Regarding Chris Obdam's request in
>> http://lists.openid.net/pipermail/openid-specs/2009-December/006276.html
> 
>> I would like to offer first the observation that this sounds just like
>> Luke Shepard's checkid_immediate "middle state" proposal, on which a
>> number of OpenID folk have already commented:
>> http://www.sociallipstick.com/2009/04/15/lets-detect-logged-in-state/
>> 
>> And I would like to offer this proposal for implementing what Luke and
>> Chris want while providing simple mechanisms to address privacy concerns.
> 
> ...snip...
> _______________________________________________
> specs mailing list
> specs at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs