A late but Happy New Year – recent silence related to starting new job at local.ch – more on that another time.
While some good resources are starting to show up explaining how OpenID works, there’s a tendency towards either “here’s how to add to your blog – don’t ask difficult questions” or significant assumed knowledge. So it’s nice if you have someone around who can explain it directly, which is what happened last webtuesday, Cédric’s providing an OpenID Overview. As well as doing a great job of explaining key points of what OpenID is and is not, he also took a good stab at illustrating OpenID transactions in terms of the communication between the hosts involved, something that seems poorly documented online right now – images here.
One particular concern the talk raised regards the final redirect of an OpenID transaction, when a new account is being setup on the relying party (the site you want to register and log into) – step 6 here. As I’ve understood it, OpenID Servers can optionally provide bits of your personal information to the relying party, to reduce you work in filling in a registration form. But that seems to be passed via the final GET request you are redirected to, GET having limits and a tendency to lie around in access logs…
Meanwhile looks like Dokuwiki is gaining OpenID support as well…
Harry Fuecks is the Engineering Project Lead at Tamedia and formerly the Head of Engineering at Squirro. He is a data-driven facilitator, leader, coach and specializes in line management, hiring software engineers, analytics, mobile, and marketing. Harry also enjoys writing and you can read his articles on SitePoint and Medium.
Jump Start Git, 2nd Edition
Visual Studio Code: End-to-End Editing and Debugging Tools for Web Developers
Form Design Patterns