OpenID

From FedoraProject

(Difference between revisions)
Jump to: navigation, search
 
(18 intermediate revisions by 6 users not shown)
Line 1: Line 1:
= using =
+
= Background =
The [[Account_System]] can act as an [http://en.wikipedia.org/wiki/OpenID OpenID] provider. '''This functionality is currently in beta.'''
+
  
When trying to log on to an OpenID enabled site, give <pre>http://username.id.fedoraproject.org</pre> as URL. Example, if your FAS login is ''JohnDoe'', you would enter ''http://JohnDoe.id.fedoraproject.org''. If you are not logged in to FAS at this stage, you will be first taken to your FAS login page. On the first login from the external site, you will be taken to admin.fedoraproject.org and asked to approve the OpenID request.
+
OpenID is a way to login to applications or resources using an existing account that acts as a identity provider. The Fedora project acts as an OpenID identity provider for anyone with a Fedora Account System account.  
  
= Screenshots =
+
= Using =
[1.png]
+
[2.png]
+
[3.png]
+
[4.png]
+
[5.png]
+
[6.png]
+
  
== feedback ==
+
We have an [http://en.wikipedia.org/wiki/OpenID OpenID] provider running named FedOAuth.
OpenID still does not work for all sites. We are looking for feedback and developers to improve the code. Please leave comments on the Discussion tab. We've also got a list of tested sites you might like to check out in there!
+
  
= contributing =
+
When trying to log on to an OpenID enabled site, give <pre>username.id.fedoraproject.org</pre> as URL. Example, if your FAS login is ''JohnDoe'', you would enter ''JohnDoe.id.fedoraproject.org''. If you are not logged in to FAS at this stage, you will be first taken to the FedOAuth login page. On the first login from each external site, you will be taken to id.fedoraproject.org and asked to approve the OpenID request.
== git ==
+
<code>git clone ssh://git.fedorahosted.org/git/fas.git</code>
+
  
It's in fas/openid_samadhi.py
+
== Persona ==
  
== upstream ==
+
FedOAuth also is an Persona provider.
It's taken and updated from an upstream project, samadhi
+
Just enter your username@fedoraproject.org email into any website that accepts Persona-based authentication and you will only need to enter your FAS password.
  
<code>ssh://git.fedorahosted.org/git/samadhi.git</code>
+
== Screenshots ==
  
It needed to be modified to work with FAS though.
+
Screenshots are [[OpenId/Screenshots|here]].
 +
 
 +
== Feedback ==
 +
 
 +
OpenID should work for all websites accepting OpenID login. We are looking for feedback and developers to improve the code. Send feedback to the fedora infrastructure list, #fedora-admin on irc.freenode.net or in a infrastructure ticket.
 +
 
 +
= contributing =
 +
== git ==
 +
<code>git clone ssh://git.fedorahosted.org/git/fas-openid.git</code>
 +
 
 +
== upstream ==
 +
FedOAuth was written by [[User:puiterwijk | Patrick Uiterwijk]].
  
samadhi was written by [[User:jcollie]]
+
A good place to start learning about OpenID and FedOAuth would be this [http://meetbot.fedoraproject.org/fedora-classroom/2013-02-22/fas-openid-class.2013-02-22-18.00.log.html classroom].
A good place to start is trying to understand the OpenID [http://openid.net/developers/specs/ spec]
+
  
 
= history =
 
= history =
OpenID was first [[https://fedoraproject.org/wiki/FedoraSummit/OpenId discussed]] at the 2006 [[FedoraSummit]].
+
OpenID was first [[FedoraSummit/OpenId|discussed]] at the 2006 [[FedoraSummit]].
 +
The OpenID implementation was completely rewritten from scratch in 2013.
  
 
= thanks =
 
= thanks =
 
Many thanks to [[User:Ricky]] for his explanations on IRC.
 
Many thanks to [[User:Ricky]] for his explanations on IRC.

Latest revision as of 00:31, 15 February 2014

Contents

[edit] Background

OpenID is a way to login to applications or resources using an existing account that acts as a identity provider. The Fedora project acts as an OpenID identity provider for anyone with a Fedora Account System account.

[edit] Using

We have an OpenID provider running named FedOAuth.

When trying to log on to an OpenID enabled site, give
username.id.fedoraproject.org
as URL. Example, if your FAS login is JohnDoe, you would enter JohnDoe.id.fedoraproject.org. If you are not logged in to FAS at this stage, you will be first taken to the FedOAuth login page. On the first login from each external site, you will be taken to id.fedoraproject.org and asked to approve the OpenID request.

[edit] Persona

FedOAuth also is an Persona provider. Just enter your username@fedoraproject.org email into any website that accepts Persona-based authentication and you will only need to enter your FAS password.

[edit] Screenshots

Screenshots are here.

[edit] Feedback

OpenID should work for all websites accepting OpenID login. We are looking for feedback and developers to improve the code. Send feedback to the fedora infrastructure list, #fedora-admin on irc.freenode.net or in a infrastructure ticket.

[edit] contributing

[edit] git

git clone ssh://git.fedorahosted.org/git/fas-openid.git

[edit] upstream

FedOAuth was written by Patrick Uiterwijk.

A good place to start learning about OpenID and FedOAuth would be this classroom.

[edit] history

OpenID was first discussed at the 2006 FedoraSummit. The OpenID implementation was completely rewritten from scratch in 2013.

[edit] thanks

Many thanks to User:Ricky for his explanations on IRC.