Re: [xwiki-dev] [Proposal] OpenID support in XWiki

Hi Artem, I think it's a great idea. But I don't think it's very long to implement. I would prefer you to work on a more generic problematic of single sign on in xwiki. You can implement OpenId and another single sign on a more enterprise oriented than OpenId. WDYT? Jeremi On 3/20/07, Artem Melentyev &lt;melenartem(a)ya.ru&gt; wrote: > Hi. > > I would like to propose the project: > > OpenID[1] support in XWiki. > > OpenID is an open, decentralized, free framework for user-centric > digital identity. [1] > > 1) XWiki as openid consumer. > Possibility to login into xwiki with openid. > Value: major > > 2) XWiki as openid provider. > Some users of xwiki will have openid account like > username.xwiki.host > or xwiki.host/openid/username > For example users in xwiki.com will have openid = > username.xwiki.com > Value: minor > > User story: > I have account and virtual wiki at username.xwiki.com. > I wish to login with openid into xwiki.org. > Standard authentication process with openid[3]: > I enter to openid login form at xwiki.org my > openid=username.xwiki.com, > click sumbit. > xwiki.org redirects me to openid authentication page in > username.xwiki.com. > I enter my password, click submit. > username.xwiki.com redirects me back to xwiki.org. > Done. I logined into xwiki.org with openid. > If I already logined to username.xwiki.com, xwiki.org will not > redirects > me to username.xwiki.com, and I don't enter password. > I may use my openid=username.xwiki.com as normal openid. For > example I > may write comments to livejournal.com with openid[2]. > > Advantages: > The User needs only one login for all xwikis and openid > services. > User's openid will be point at homepage on xwiki (possibly). > Increase popularity of xwiki project: > There are not much openid providers for now. [4] > XWiki users will promote xwiki their openids (*.xwiki.com) > > There are also bounty($5000) for openid-enabled opensource > projects: > http://iwantmyopenid.org/bounty > > There are other authorization protocols, similar to the > technology openid: > http://lid.netmesh.org/ > http://en.wikipedia.org/wiki/Inames (inames mostly paid) > http://yadis.org/ > But it is not too common. > > Technical details: > Possible openid implementations: http://code.google.com/p/ > openid4java/ > or http://code.google.com/p/joid/ > Consumer: > Then user logins with openid first time, xwiki create > special user > like XWiki.openid_<user's openid> for a user settings storage. > Provider: > java servlet. > > WDYT? > > Is this project suitable for GSoC 2007? > Estimated workload: 1-2 man/month > > References: > [1] http://openid.net/ > [2] http://www.livejournal.com/openid/ > [3] http://openid.net/about.bml > [4] http://openid.net/wiki/index.php/Public_OpenID_providers > > -- Artem Melentyev, UralSU, CS401 > > > > > --You receive this message as a subscriber of the xwiki- > dev(a)objectweb.org mailing list. > To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org > For general help: mailto:sympa@objectweb.org?subject=help > ObjectWeb mailing lists service home page: http:// > www.objectweb.org/wws > > ------------------------------------------------------------------- ----- -- You receive this message as a subscriber of the xwiki- dev(a)objectweb.org mailing list. To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org For general help: mailto:sympa@objectweb.org?subject=help ObjectWeb mailing lists service home page: http:// www.objectweb.org/wws