From Fedora Project Wiki

No edit summary
(19 intermediate revisions by 6 users not shown)
Line 1: Line 1:
= using =
= Background =
The [[Account_System]] can act as an [http://en.wikipedia.org/wiki/OpenID OpenID] provider. '''This functionality is currently in beta.'''


When trying to log on to an OpenID enabled site, give <pre>http://username.id.fedoraproject.org</pre> as URL. Example, if your FAS login is ''JohnDoe'', you would enter ''http://JohnDoe.id.fedoraproject.org''. If you are not logged in to FAS at this stage, you will be first taken to your FAS login page. On the first login from the external site, you will be taken to admin.fedoraproject.org and asked to approve the OpenID request.
OpenID is a way to login to applications or resources using an existing account that acts as a identity provider. The Fedora project acts as an OpenID identity provider for anyone with a Fedora Account System account.  


== feedback ==
= Using =
OpenID still does not work for all sites. We are looking for feedback and developers to improve the code. Please leave comments on the Discussion tab. We've also got a list of tested sites you might like to check out in there!
 
We have an [http://en.wikipedia.org/wiki/OpenID OpenID] provider running named FedOAuth.
 
When trying to log on to an OpenID enabled site, give <pre>username.id.fedoraproject.org</pre> as URL. Example, if your FAS login is ''JohnDoe'', you would enter ''JohnDoe.id.fedoraproject.org''. If you are not logged in to FAS at this stage, you will be first taken to the FedOAuth login page. On the first login from each external site, you will be taken to id.fedoraproject.org and asked to approve the OpenID request.
 
== Persona ==
 
FedOAuth also is an Persona provider.
Just enter your username@fedoraproject.org email into any website that accepts Persona-based authentication and you will only need to enter your FAS password.
 
== Screenshots ==
 
Screenshots are [[OpenId/Screenshots|here]].
 
== Feedback ==
 
OpenID should work for all websites accepting OpenID login. We are looking for feedback and developers to improve the code. Send feedback to the fedora infrastructure list, #fedora-admin on irc.freenode.net or in a infrastructure ticket.


= contributing =
= contributing =
== git ==
== git ==
<code>git clone ssh://git.fedorahosted.org/git/fas.git</code>
<code>git clone ssh://git.fedorahosted.org/git/fas-openid.git</code>
 
It's in fas/openid_samadhi.py


== upstream ==
== upstream ==
It's taken and updated from an upstream project, samadhi
FedOAuth was written by [[User:puiterwijk | Patrick Uiterwijk]].
 
<code>ssh://git.fedorahosted.org/git/samadhi.git</code>
 
It needed to be modified to work with FAS though.


samadhi was written by [[User:jcollie]]
A good place to start learning about OpenID and FedOAuth would be this [http://meetbot.fedoraproject.org/fedora-classroom/2013-02-22/fas-openid-class.2013-02-22-18.00.log.html classroom].
A good place to start is trying to understand the OpenID [http://openid.net/developers/specs/ spec]


= history =
= history =
OpenID was first [[https://fedoraproject.org/wiki/FedoraSummit/OpenId discussed]] at the 2006 [[FedoraSummit]].
OpenID was first [[FedoraSummit/OpenId|discussed]] at the 2006 [[FedoraSummit]].
The OpenID implementation was completely rewritten from scratch in 2013.


= thanks =
= thanks =
Many thanks to [[User:Ricky]] for his explanations on IRC.
Many thanks to [[User:Ricky]] for his explanations on IRC.

Revision as of 00:31, 15 February 2014

Background

OpenID is a way to login to applications or resources using an existing account that acts as a identity provider. The Fedora project acts as an OpenID identity provider for anyone with a Fedora Account System account.

Using

We have an OpenID provider running named FedOAuth.

When trying to log on to an OpenID enabled site, give

username.id.fedoraproject.org

as URL. Example, if your FAS login is JohnDoe, you would enter JohnDoe.id.fedoraproject.org. If you are not logged in to FAS at this stage, you will be first taken to the FedOAuth login page. On the first login from each external site, you will be taken to id.fedoraproject.org and asked to approve the OpenID request.

Persona

FedOAuth also is an Persona provider. Just enter your username@fedoraproject.org email into any website that accepts Persona-based authentication and you will only need to enter your FAS password.

Screenshots

Screenshots are here.

Feedback

OpenID should work for all websites accepting OpenID login. We are looking for feedback and developers to improve the code. Send feedback to the fedora infrastructure list, #fedora-admin on irc.freenode.net or in a infrastructure ticket.

contributing

git

git clone ssh://git.fedorahosted.org/git/fas-openid.git

upstream

FedOAuth was written by Patrick Uiterwijk.

A good place to start learning about OpenID and FedOAuth would be this classroom.

history

OpenID was first discussed at the 2006 FedoraSummit. The OpenID implementation was completely rewritten from scratch in 2013.

thanks

Many thanks to User:Ricky for his explanations on IRC.