openid – Row Coding

How to add Social login services from Google, Facebook, Yahoo etc. to my website?

September 24, 2023 by Tarik

You’ll be using the APIs of the respective services (Google, Facebook, Twitter) or may be OpenID if you plan to add that as well. Some links: http://code.google.com/apis/accounts/docs/OpenID.html https://developers.facebook.com/docs/authentication/ http://dev.twitter.com/pages/auth http://openid.net/add-openid/ Also take a look here. There are several similar questions already present on SO, check the related questions on the right.

How do you develop against OpenID locally

September 16, 2023 by Tarik

The libraries at OpenID Enabled ship with examples that are sufficient to run a local test provider. Look in the examples/djopenid/ directory of the python-openid source distribution. Running that will give you an instance of this test provider.

Secure remote_api in app engine with OpenID

September 9, 2023 by Tarik

Best way to implement Single-Sign-On with all major providers?

September 9, 2023 by Tarik

Authentication for REST web services

September 1, 2023 by Tarik

You could consider JWT (JSON Web Token) see JWT draft rfc. It would certainly meet your security and session expiration requirements. However being a draft standard it’s unlikely to be widely used right now, this could change soon since JWT are part of OAuth 2.0. JWT are easy to implement in most languages and there … Read more

Best OpenId API for ASP.NET MVC application

August 13, 2023 by Tarik

We use the excellent DotNetOpenId library here on Stack Overflow: http://code.google.com/p/dotnetopenid/ now moved to: http://www.dotnetopenauth.net/ Our original login UI was provided by ID Selector, but we’ve since rolled our own minimalist version.

What is the difference between id_token and access_token in Auth0

August 2, 2023 by Tarik

OpenID Connect is built on top of OAuth2. An access_token is useful to call certain APIs in Auth0 (e.g. /userinfo) or an API you define in Auth0. An id_token is a JWT and represents the logged in user. It is often used by your app. A refresh_token (only to be used by a mobile/desktop app) … Read more

What is the benefit of using ONLY OpenID authentication on a site?

July 21, 2023 by Tarik

The benefit of making OpenID mandatory is simply that login code for the website does not need to be written (beyond the OpenID integration), and no precautions need to be taken around storing user passwords etc. Not having your own login code also means not having to deal with a lot of support issues like … Read more

IdentityServer Flows

June 9, 2023 by Tarik

I faced the same Issue, currently the work still in progress. when I finish the documentation, I might post it here. for time being: please check the draft: Enrich IdentityServer Documentation with OIDC and OAuth2 Flows section #73 Update: OIDC and OAuth2 Flows

What reasons are there NOT to use OpenID?

June 6, 2023 by Tarik

It may be slightly inaccurate to say that the average person doesn’t understand OpenID. In most cases, with a little persuasive marketing (ie “USE ONE LOGIN ON ALL SITES!!!11!) they can understand that it allows them to log in at sites using one login rather than having a bunch of different usernames and passwords at … Read more