2009年7月6日 · OpenID is an open standard and decentralized authentication protocol controlled by the OpenID Foundation. OAuth is an open standard for access delegation. OpenID Connect (OIDC) Combines the features of OpenID and OAuth …

2017年8月9日 · OpenID is an open, decentralized, free framework for user-centric digital identity. OpenID takes advantage of already existing internet technology (URI, HTTP, SSL, Diffie-Hellman) and realizes that people are already creating identities for themselves whether it be at their blog, photostream, profile page, etc.

2009年1月3日 · OpenID is spectacularly susceptible to phishing attempts. If you run an OpenID site, try changing the login page one day to request the identifier and password, instead of the normal approach of only requesting the identifier and redirecting to the OpenID provider to request the user's password. I bet you can get over a fourth of your user's ...

2008年8月19日 · See Scott Hanselman's post on using DotNetOpenID in ASP.NET. Andrew Arnott's blog is full of samples on using DotNetOpenID with ASP.NET, including ASP.NET MVC.

2010年8月17日 · OpenID is based on the premise that you (the iPhone app) only want to know about your users that their OpenID-provider trusts them. They never authenticate themselves to you. Good OpenID-providers in fact even prevent that you mediate the authentication process (as this would expose users to a possible attack - by you!): they demand that users ...

2009年12月2日 · how do I do the OpenID authentication via API; how do I maintain the "authenticated" state in subsequent requests; For first part, OpenID authentication almost always includes interactive steps. During the authentication process there will most likely be a step where user is in OpenID provider's web page, signing in and pressing some "I agree ...

2010年1月23日 · django-openid; django-openid-auth; another django-openid-auth, which seems to be dead; django-authopenid; django-socialauth (which also provides authentication with Twitter and Facebook accounts) django-socialregistration (has Facebook and Twitter authentication, too) django-openid-consumer, a fork of Simon Willison's original django-openid ...

2012年7月18日 · But with OpenID, you own your identifier and you can map it to any OpenID Provider you wish. SAML2 has different bindings while the only binding OpenID has is HTTP; SAML2 can be either Service Provider (SP) initiated or Identity Provider (IdP) initiated. But OpenID always SP initiated. SAML 2 is based on XML while OpenID is not based on XML.

2009年9月14日 · I'm looking to integrate OpenID into my website, but I need a tutorial to help me get going. You can assume I have a good programming knowledge when making a recommendation :)

UPDATE: A SPA uses AJAX for communicating with my web service (ASP.NET Web API). In my web service a use OWIN Middleware. I set OpenIDConnect as the authentication mechanism. When the web service is called for the first time it successfully redirected the user to the login page of the OpenID Connect Provider.