Email Addresses as OpenIDs « hueniverse

So, to summarize, OpenID User Discovery for email addresses and other email-like identifiers might work like this:

  • The RP starts with a user identifier acct:bob@example.com (either because the user typed their email address bob@example.com into a login form, or because the RP received an OpenID assertion about the claimed id acct:bob@example.com).
  • The RP fetches the host-meta for example.com, and looks for a of rel-type “describedby”.
  • The RP applies the URI acct:bob@example.com to that , and obtains a URL from which to fetch the meta-data for acct:bob@example.com.
  • The XRD obtained from that URL (which is for subject acct:bob@example.com) points to the OpenID endpoint.

Posted 1 month ago

0 comments

Leave a comment...

 
To leave a comment on this posterous, please login by clicking one of the following.
Posterous-login     Connect     twitter