OpenID versus oAuth 2

SitG Admin sysadmin at shadowsinthegarden.com
Mon May 17 04:42:41 UTC 2010


>I was moving to the OpenID provider component when I noticed this thread
>of using oAuth 2 for identity. So now I wonder if I am in the right
>path? Shall I keep doing it with OpenID or shall I do it with oAuth 2?
>Can anybody please shed some light so I can make the best decision?

Manuel,

I notice from the links in your sigline that you know PHP: the 
current thread is just a proposal for OpenID v3.0 (v2.0 has working 
libraries you can use right away), but you may find it worthwhile 
looking at the example code (openidconnect.com) since it promises to 
shorten your work from ~3,000 lines of PHP (albeit already written up 
for you) to a few dozen, built on OAuth (which is, itself, more than 
a few dozen lines in PHP).

-Shade


More information about the specs mailing list