How Does OpenID Work?
|
The article you are reading has moved! It is now available at: http://blog.tinisles.com/2008/02/how-does-openid-work/ |
I've heard about OpenID on a podcast I listen to. Sounds interesting - an open source solution to have a 'single sign on' for many websites. Interested to see how this works - both as a user, and as a website author.
Here's a run through of an example authentication:
- User accesses an OpenID enabled website, site responds with a form requesting the user's OpenID identity.
- User enters their identity, e.g: russau.myopenid.com. Then submits the form to the website.
- Website server accesses http://russau.myopenid.com.
- Retrieves the location of the OpenID provider from the link tag:
<link rel="openid.server" href="http://www.myopenid.com/server" />
- Website POSTs an 'associate' request to the provider. The two machines establish a secret using a Diffie-Hellman key exchange.
openid.mode associate openid.assoc_type HMAC-SHA1 openid.session_type DH-SHA1 openid.dh_consumer_public openid.dh_modulus openid.dh_gen Ag== - Provider's response provides the website an 'assoc_handle' (and expiry) for future requests. The two servers now have established a shared secret, without passing it over the wire.
- The comsumer's response from step 2 contains a redirect to the provider, containing a number of parameters in the querystring. Note, the querystring contains the established 'assoc_handle', and a 'nonce' has been attached onto the 'return_to'.
openid.mode checkid_setup openid.identity http://russau.myopenid.com/ openid.return_to http://openidconsumer.test/cp/login.aspx?&nonce=vovudmLa openid.trust_root http://openidconsumer.test/cp openid.assoc_handle {HMAC-SHA1}{47b0ec92}{5hMN8A==} openid.sreg.required gender,postcode,timezone openid.sreg.optional email,country openid.sreg.policy_url - The user is now on the provider website, and performs the step needed to authenticate, e.g. entering a password.
- The provider redirects the user back to the consumer website, along with parameters in the querystring. The consumer now has everything it needs to log in the user.
nonce vovudmLa openid.assoc_handle {HMAC-SHA1}{47b0ec92}{5hMN8A==} openid.identity http://russau.myopenid.com/ openid.mode id_res openid.op_endpoint http://www.myopenid.com/server openid.response_nonce 2008-02-12T00:47:53ZyUUam3 openid.return_to http://openidconsumer.test/cp/login.aspx?nonce=vovudmLa openid.sig EpvWdJtxacv2WtCaZLbud85M84k= openid.signed assoc_handle, identity, mode, op_endpoint, response_nonce, return_to, signed, sreg.country, sreg.email openid.sreg.country AU openid.sreg.email testuser@webmail.com
assoc_handle | {HMAC-SHA1}{47b0ec92}{5hMN8A==} |
assoc_type | HMAC-SHA1 |
dh_server_public | |
enc_mac_key | |
expires_in | 1209600 |
session_type | DH-SHA1 |
Further reading
- OpenID Authentication 1.1
- OpenID Simple Registration Extension 1.0
- dotnetopenid - C# implementation of OpenID consumer and provider
- OpenIDSpecification
Thanks a lot for the very easy to understand summary covering request and response formats. It would be great if you can elobrate the role of encryption.
Posted by Anonymous | 7:59 pm
hi Parijat,
there's not actually any "encryption" going on here. in steps 5 & 6 the two servers establish a "shared secret" using a Diffie-Hellman key exchange. in step 9 the OpenID enabled website receives a querystring that contains a signaure using this "shared secret". so the website server can be 100% confident the querystring has come from the same server it talked to in step 5.
Posted by Russ | 4:53 pm
I should mention that with OpenID 2.0 specifications, the consumer and provider can now be the same entity, for example, Google or MySpace. And instead of end-users using a URL as an OpenID, they can click a button that says "Log in with Google" and be redirected to Google page to log in, and be redirected back to the original page logged in. This is a huge step because users don't need to set up anything different if they already have a Google, Myspace, Yahoo, etc. account.
Posted by StatiK EffecK | 11:37 pm
Hi StatiK EffecK - this is a very cool feature of openid called "directed identity" - google mention it on their blog post here: http://google-code-updates.blogspot.com/2008/10/moving-another-step-closer-to-single.html
More interesting stuff google is doing with openid here: http://google-code-updates.blogspot.com/2009/05/google-openid-api-taking-next-steps.html
Posted by Russ | 1:50 pm
It's my second time in the temple tree spa and sauna, I have been dozens of time in their other parlour, and definitely the host service thai massage Dublin and the massage service is the same amazing and perfect.
Posted by Jamil Dart | 3:35 pm
terselip sudah main bandar poker online dan angkat tangan maka bakal.
Posted by ShermanBryan | 4:11 pm
memilih situs judi situs bandarq online terpercaya online yang paling baik & trick memilihnya.
Posted by CynthiaDewi | 4:30 pm
Namun tak sampai setahun situs judi qq online terpercaya selanjutnya nyatanya semakin tidak sedikit perizinan tumbuh dgn online.
Posted by Donna Rose | 4:39 pm
Dapat tenar dan poker qq populer dikalangan warga.
Posted by Annya Julie | 4:49 pm
Ini menjadi teramat membantu situs poker terbaru sekitar penggemar dan masih permain.
Posted by Clifford Hone | 5:01 pm
Maka berikan kesempatan agen bandarq menang yang lebih akbar terhadap member.
Posted by Sandra Lopez | 5:09 pm
Yang tersebar diinternet agen poker online dgn meremehkan beraneka pelayanan.
Posted by Dave Hall | 5:16 pm
Meski seiring dgn majunya agen bandarq jaman bersama layanan jaringan.
Posted by Kendal Heap | 5:26 pm
Sejarah jalan judi online JUDI ONLINE DI INDONESIA.
Posted by Baryram Davie | 5:34 pm
Walau dapat dibilang daftar pokerpelangi permainan ini autentik sahih mengasyikan.
Posted by Ethan Tang | 5:49 pm
Anda serta harus sanggup meraih daftar pelangiqq rekomendasi bersumber beberapa permain senior.
Posted by Carter Rawls | 5:57 pm
Kewangian bergabung dengan daftar mandiridomino website judi online terpercaya dgn kiat online Cuma.
Posted by Aiden Mckenna | 6:04 pm
Bisa lagi pula dengan melaju daftar indosahabat jumlahnya permain yang sudah bermain dan laksanakan taruhan judi online.
Posted by Unknown | 6:09 pm
Walaupun kepada ketika itu website pasarqq hanya sebentar bandar perjudi yang mampu diakses oleh peminat judi.
Posted by Kevin Fife | 6:16 pm
Meski seiring dengan situs qq majunya jaman bersama layanan jaringan.
Posted by Chrity Rosen | 2:28 pm
Bisa melainkan dengan bertambah rajawaliqq jumlahnya permain yang sudah bermain dan melakukan taruhan judi online.
Posted by Harlan Babcock | 2:51 pm
Era lalu belum ditemukan situs bandarjudiqq internet tengah masih kecanggihan technologi.
Posted by Derward Grasby | 3:00 pm
Maka setimbal jujur website rajaqq permain hanya memikirkan kegemilangan tak dengan.
Posted by Gunar Thondley | 3:10 pm
Sejarah dari seri judi ratuqq online di indonesia pada thn 1996 dibentuklah bentuk.
Posted by Arnuad Veepon | 3:17 pm
Mampu tenar dan website maindomino99 ternama dikalangan warga.
Posted by Rebeca Lynn | 3:32 pm
Walaupun bisa dibilang daftar masterdominoqq permainan ini legal pasti mengasyikan.
Posted by Benton Hawton | 3:38 pm
Trayek perjudian campionqq satu termaksuk sedang indonesia.
Posted by Heall Horley | 3:47 pm
Lagi pula kepada saat itu hanya sebentar daftar murahqq bandar perjudi yang dapat diakses oleh peminat judi.
Posted by Georges Hallets | 3:54 pm
Semula adanya gambar yang agen jadiqq menghasilkan anda merasakan fakta bermain judi online.
Posted by James Perez | 4:03 pm
Keharuman kemasyhuran bergabung daftar ikanqq bersama website judi online terpercaya bersama metode online Cuma.
Posted by Russell Saldivar | 4:12 pm
Dikala ini sudah tak situs janjiqq sebentar tertera web judi online.
Posted by LeonardAllen | 4:18 pm
Kian jalan ketika ini daftar ahliqq ini resmi menakjubkan lantaran orang telah.
Posted by Thomas Cordes | 4:30 pm
Rute perjudian daftar asikqq satu termaksuk terus indonesia.
Posted by ChristopherRainey | 4:38 pm
Bahkan jalan diwaktu ini indoqq ini sah menakjubkan lantaran orang telah.
Posted by Unknown | 4:47 pm
Buat kalian para pecinta judi online, ayo segera daftar dan coba keberuntungan anda dengan permainan Game Poker kami & Raih Jackpot Terbesar dan Pertama Di INDONESIA. HADIAH JACKPOT CASH 60.000.000 JUTA hanya di SOBATPOKER.
Agen Poker Online Terpercaya
Judi Online
Link alternatif sobatpoker
sobatpoker
Posted by Sobatpoker | 4:06 am
pasti bagi anda yang suka bermain judi tidak asing dengan idn poker situs judi online yang telah dipercaya banyak pemain di indonesia dengan deposit yang murah dan banyak keuntungan yang bisa di dapatkan dengan mudah. klik link di bawah ini.
http://www.aacaa7.org/daftar-poker-terpercaya-langsung-dapat-bonus-20rb-setelah-deposit/
Posted by http://www.aacaa7.org/ | 3:34 pm
Bagus untuk artikel dan bloggernya, Kunjungin juga yaa :
- Cerdascasino
- Cerdas Casino
- Casino Online Terpercaya
- Garasi Casino
Terimakasih warga +62 :)
Posted by gaby anastasia | 7:26 am
bermain judi online di idn poker bisa dapat keuntungan besar dan banyak bonusnya setiap hari hanya dengan deposit 10 ribu rupiah anda sudah bisa bermain judi online di idn poker, anda juga berkesempatan mendapatkan iphone 11 + jackpot senilai 850 juta untuk 1 pemain yang beruntung, ayo klik link di bawah ini untuk bermain judi onlinei idn poker.
http://www.aacaa7.org/texas-poker-online-uang-asli-sekarang-udah-bisa-main-di-hp
Posted by texas poker online uang asli | 1:56 pm
hantuangka adalah blog togel yang menyediakan prediksi togel jitu, paito togel lengkap, livedraw result togel, buku tafsir mimpi lengkap, dan juga merekomendasikan bandar-bandar togel terpercaya di indonesia.. belum kenal hantuangka? mari kita berkenalan supaya bisa lebih dekat dan bisa mendapatkan prediksi jitu setiap harinya.. kunjungi www.hantuangka.org
Posted by Hantu Angka | 8:39 am
idn poker situs judi online dengan berbagai macam keuntungan dan yang bisa anda dapatkan dengan mudah setiap hari bermain di idn poker, anda cukup modal 10 ribu saja anda sudah bisa bermain di idn poker, anda juga bisa dapat jackpot senilai 850 juta dan iphone 11 untuk 1 orang pemain yang beruntung, jika anda pensaran bisa klik link di bawah ini untuk lebih lanjuntnya.
https://shopsnoir.com/forums/users/situspoker
Posted by IDN Poker | 2:49 pm
Good Job Thanks For Your support,,Good article
Poker Online
Judi Poker
Judi Poker Online
QQOnline2019
bandar domino99
poker online terpercaya
daftar domino
Berita Terhot
Raja ID PRO
Posted by mimi nesya | 8:18 pm
Awesome post. I’m a normal visitor of your site and appreciate you taking the time to maintain the excellent site. I’ll be a regular visitor for a long time.
https://ember101.com/situs-agen-judi-idn-poker-ceme-terpercaya-di-indonesia/
https://ember101.com/agen-poker-online-pokercuan-paling-untung-dengan-modal-seadanya/
https://ember101.com/game-capsa-online-uang-asli-deposit-via-dana/
Posted by poker | 2:41 pm
It’s nearly impossible to find educated people for this topic, but you sound like you know what you’re talking about! Thanks
Agen Slot
Joker Slot
JokerVIP
Tembak Ikan
Slot online
Posted by Ayamjago4d | 10:35 pm
This post is very simple to read and appreciate without leaving any details out. great work!
game android terbaik
game pc terbaik
Posted by Anonymous | 11:07 pm
Metode paling populersitus poker online ke web dan memperoleh yang berharga.
Posted by Eyn Money | 8:17 am
Nice post. It is really interesting. Thanks for sharing the post!
hasil bola
berita olahraga
dunia sport
berita trending
trens berita
Posted by . | 7:32 pm
Link Alternatif Terbaru Liga588
Link Alternatif Liga588
Dewa Slot Online
Situs Slot
Slot Online
Link Daftar Liga588
Posted by Dominoqq | 3:46 am
taruhan dan sebagainya. Beberapa kali pertama Anda bermain poker, mungkin sulit bagi Anda untuk dapat sepenuhnya memahami apa yang terjadi di meja poker tetapi seiring berjalannya waktu, saya yakin Anda akan bisa menguasainya 98toto
Posted by Chaves Truid | 8:28 am
paito warna
paitowarna
paito warna sydney
paito warna hongkong
paito warna singapore
togel cambodia
data sidney
data hongkong
togel singapore
paito warna china
Posted by pafikotapemangkat | 6:23 am
judi bola
Posted by Anggun Agen QQWIN | 8:40 pm
casino online
Posted by Agen JudI Onlien MPO | 11:50 pm
situs casino
Posted by Boya Kullen | 1:05 am
This comment has been removed by the author.
Posted by belajar seo | 4:56 pm
ayo bergabung bersama sekarang juga berssama bandar togel terpercaya idol188
Posted by belajar seo | 5:00 pm
Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom Nino Nurmadi, S.Kom
Posted by Nino Nurmadi , S.Kom | 11:53 pm
DAFTAR ID PRO WINRATE 99% HANYA DI PKVMIYAQQ.COM
Posted by ADMIN | 9:24 am
Ingin cari situs Judi online yang terpopuler, terbaik dan terpercaya di seluruh Indonsia. Yuk mari bergabung dan bermain di situs EPIKQQ ini. SItus EPIKQQ ini meneydiakan 9 permainan yang dapat di mainkan menggunakan 1 USER ID saja, permainan yang di sediakan oleh situs EPIKQQ ini ialah sebagai berikut :
1. POKER
2. DOMINO 99 / DOMINO QQ
3. BANDAR Q
4. ADU Q
5. CAPSA SUSUN
6. SAKONG
7. BANDAR POKER
8. BANDAR 66
9. PERANG BACCARAT
Selain itu situs EPIKQQ ini juga menyediakan bonus menarik, bonus yang di sediakan ialah :
1. Bonus cashback 0.3%
2. Bonus referral 20%
Minimal deposit dan tarik dana di situs EPIKQQ ini hanya cuma RP.10.000 saja anda juga sudah bisa bermain dan beradu keberuntungan hingga menangkan ratusan juta rupiah.
Mari segera bermain dan bergabung di situs EPIKQQ ini. Klik link Alternatif untuk mendaftar di bawah ini :
1. DAFTAR EPIKQQ
2. LOGIN EPIKQQ
3.DAFTAR ID PRO EPIKQQ
4. LOGIN ID PRO EPIKQQ
Posted by JUDI ONLINE TERPERCAYA | 3:23 am
This sites really give me so much inspiration! the design is very nice too. i hope you can reply, and geive me tips for my website ! :)
agen joker388
Slot Online Via Pulsa
Bandar judi Sepak Bola
Judi Tembak Ikan Online
bonus besar Sepak Bola
Bandar judi Sepak Bola
game online uang asli
Posted by AGEN JOKER123 | UNDUH JOKER388 | 8:41 pm
Poker Deposit Pulsa
DominoQQ Pulsa
IDN Poker Pulsa
Poker88 Pulsa
Poker Pulsa
QQ Pulsa
Ceme Online
Situs Poker Deposit Pulsa
QQ Deposit Pulsa
Posted by Pokerwin88 | Poker Deposit Pulsa | Poker Online | Ceme Online | 9:31 am
this site have become the biggest influence for my website. The author should be considered as one of the best. Please Contact me so i can know how you make the website.
agen joker388
Slot Online Via Pulsa
Bandar judi Sepak Bola
Judi Tembak Ikan Online
agen joker123
Bandar judi Sepak Bola
game online uang asli
Posted by Theresia Helena | 7:50 am
well, this website is keep informing with great writing and very good interface.
game tembak ikan
game ikan
Bandar judi Sepak Bola
daftar joker123
game tembak ikan
Bandar judi Sepak Bola
game online uang asli
Posted by Unknown | 10:17 am
Having read this I believed it was very informative. I appreciate you finding the time and energy to put this article together. I once again find myself spending a lot of time both reading and posting comments. But so what, it was still worthwhile.
Taruhan Bola
Agen Bola
Casino Online
Posted by Bryan Cur | 8:27 pm
good website ke popping of. for this website ill give 4 out of 5!
game tembak ikan
game ikan
Bandar judi Sepak Bola
daftar joker123
game tembak ikan
Bandar judi Sepak Bola
game online uang asli
Posted by agen tembak ikan online | 7:15 am
Fish Shooter Online Is a good game for gaining money!
game ikan
Bandar judi Sepak Bola
download joker123
game tembak ikan
Bandar judi Sepak Bola
sabung ayam online
Posted by Michelle Han | 7:39 am
This is the greatest blog of all time!
game ikan
Bandar judi Sepak Bola
download joker123
game tembak ikan
Bandar judi Sepak Bola
sabung ayam online
Posted by Jennifer Huang | 5:02 am
slotxo เล่นเกมได้เงินจริงสบายๆ ยิงปลาเล่นสล็อตกะแฟน ชิวๆ ลง300ได้กำไรมาพัน มีที่ไหนอะ เล่นได้ทุกที่ทั่วโลกก คือเมนูก็ไทยอีกไง เล่นง่ายๆปังๆเลยอะ
Posted by Doublej | 8:37 pm
ร่วมสมัครสมาชิกรับฟรีเครดิต สล็อตxo ข้อเสนอเดิมพันฟรีไม่จะต้องฝาก ... สมัครเลยรับเครดิตฟรีในทันที โปรโมชั่นทดลองเล่นพนัน 300 ไม่จำเป็นต้องฝาก 2020
Posted by Doublej | 7:49 pm
Thank you for putting this by!
game ikan
Bandar judi Sepak Bola
download joker123
game tembak ikan
Bandar judi Sepak Bola
sabung ayam online
Posted by Unknown | 10:20 pm
Situs Judi QQ Online Terpercaya
QQ Online
Posted by duetqiu | 8:08 pm
http://185.51.35.48 merupakan agen judi online menjanjikan permainan paling fairplay dan partner Terpercaya PKV games.Info situs : http://maid-right.us/__media__/js/netsoltrademark.php?d=185.51.35.48
Posted by DuetQQ | 8:34 pm
Situs Poker Online
Domino99
Posted by DuetQQ | 8:35 pm
Situs Poker Online Terpopuler
http://maid-right.us/__media__/js/netsoltrademark.php?d=94.46.126.133
Posted by duetqq.site | 8:48 pm
Kumpulan Situs Judi BandarQ Online Terbaik, Terbesar, Terpercaya & Terpopuler Di Indonesia || http://maid-right.us/__media__/js/netsoltrademark.php?d=94.46.120.102
Posted by ListBandarQiu | 10:23 pm
PartaiQQ adalah Situs Poker Terpercaya Indonesia Terbaik.Promo situs PartaiQQ : Bonus Cashback 0.3% Setiap Senin -Bonus Referal 20% Seumur Hidup Minimal Deposit dan Withdraw Rp. 15.000,-
Info : http://maid-right.us/__media__/js/netsoltrademark.php?d=partaiqq.link
Posted by PartaiQQlink | 10:43 pm
Kumpulan Situs Judi QQ Online Terpercaya 2020 - 2021
Posted by QQ Slot Terbaru | 3:06 pm
bagi anda yang bermain dalam link https://partaiqq.mobi anda harus bermain dalam dominoqq dimana ini akan menjadi awal yang luar biasa ketika bermain.
Posted by angelvalery8899 | 9:02 am
Thanks for Sharing such an amazing article. Keep working... Your Site is very nice, and it's very helping us.. this post is unique and interesting, thank you for sharing this awesome information
Kusum Yojana | Kusum Yojana Registration
Posted by Yakshita | 12:45 am
MEJAQQ: AGEN JUDI POKER DOMINOQQ BANDARQ ONLINE TERBESAR DI ASIA
MEJAQQ
BANDARQ ONLINE
SITUS BANDARQ
DAFTAR MEJAQQ
Posted by MEJA PKV | 8:28 am
Your blog is filled with unique good articles! I was impressed how well you express your thoughts.
UP Rojgar Mela 2021, Online Registration , Sewayojan Registration @sewayojan.up.nic.in
Posted by Bipard | 10:17 pm
I think this is really interesting. It's something that really made me love and read about it. สมัคร สล็อตxo
Posted by น้องส้มส้ม | 8:52 pm
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Posted by Nino Nurmadi , S.Kom | 11:13 pm
sohbet hattı
telde sohbet
sohbet hattı
sohbet hattı
sohbet hattı
sohbet hattı
Posted by Karolinax | 3:21 am
Server Pkvgame Situs Paling Mudah Menang Situs PKV Games Gampang Menang
Posted by Anonymous | 9:51 pm