Hi!
I'm currently adding OpenID authentication support to XWiki but I'm
experiencing some problems with the current architecture.
First of all the current architecture doesn't support multiple
authenticators simultaneously (at least I didn't find how). I wanted to add
OpenID as an additional (optional) authentication method as shown in my
proposal at
http://dev.xwiki.org/xwiki/bin/view/Design/SingleSignOn. This is
not possible with the current design - at least not in an elegant manner.
Should I add OpenID so that it is always shown if the MyFormAuthenticator is
used? Or should I think about how we could make XWiki more flexible?
I can't implement the whole XWikiAuthService interface because OpenID
doesn't use passwords. This could cause problems. Should we change that
interface or create a new one for authentication methods that rely only on
XWikiContext?
I need a mechanism to handle the response of the OpenID provider (at a known
URL). What's the best approach for that? Using an action, a servlet, ...? I
need to parse and evaluate the response and depending on return to the login
form showing an error message or logging in the user and forwarding it to
the requested resource.
Thanks,
Markus