[Snippet] OpenID + WebSignin authentification

For a personal project, I needed a SSO solution. After having take a look to Microsoft Passport and Yahoo! SSO, I focused on OpenID (see openid.net). It is less secured but not limited to one provider (see for example myopenid.com, verisign or soon Orange).
Then here is a collection of snippets based on Weblogin including OpenID authentification.

New version 0.95:
- Can now completely replace weblogin (there was some references to weblogin snippet folder in previous version)
- Localization of validation messages for users
- Email validation included for local signup
- Use of templates (chunks) for email content (useful for localization) and subject
- Some code cleanup...

openidlogin
Features:
- all WebLogin features plus
- OpenID authentification and/or local authentification
- possibility to create automatically users in MODx when authenticate by an OpenID server
- possibility to add the created user to a specified web user group
There is no email validation while registering automatically because it should already be done by the OpenID server.

weblogin
For those who want only use new snippet parameters and options (localization)

websignup
Some additional options: email validation, localization

TODO:
- add a trusted list of OpenID server (because everyone can build one, that the power and the weakness of OpenID).
- add additional snippets to modify password and other profile info.

Very quick documentation
The zip file contains all needed files. Extract them in a new openidlogin folder in the snippets folder (base_url/assets/snippets/openidlogin).
- Files named *.php are the snippets: open them and copy their content in new snippets. Snippets names may be files names (without .php).
- Files named *.tpl are some chunk examples
- Files in lang folder are localization files
- Other files (*.inc.php in main folder, *.php in subfolders) contain processing.

Wow, this looks really nice. Great work!

I need to read more about the technical/security aspects of OpenID but it sounds like a good solution for non-sensitive content such as blog commenting, etc. I can’t wait to try it out.

This is really cool winceofr !

Nice contrib there
Off to downloading !

Thanks for the snippet.

I have been looking for an openid implementation.

Would you be able to give some instructions on how to install and use this snippet?

Thank you so much.

I wonder what authentification is? Just kidding

I’m working on a sort of SSO form of authentication between Vanilla and MODx. OpenID sounds interesting too. I’ll take a look

Thanks for you work!

Quote from: winceofr at Apr 14, 2007, 08:24 AM

There is no email validation while registering automatically because it should already be done by the OpenID server.

I’d suggest still doing email validation even if a user comes from OpenID, as there’s no guarantee at all that their OpenID server put them through a validation step (many don’t). Are you pulling the e-mail address from simple registration? If so, be aware that some providers don’t support that OpenID extension so you should make sure there’s some kind of fallback. More on that here:

http://simonwillison.net/2007/Jun/30/sreg/

Hi Guys,
I’m an Orange France customer and just discovering OpenID.
This is really great and I’m trying to set it up on my modx site. Unfortunately for some reason nothing happen when I try to login using my OpenID login.
I have a Registred user group and use snippet call like this :
[[openidlogin? &loginhomeid= `48` &openidoption=`1` &openidautomatic=`1` &openidautogroup=`Registered`]]

Any clue ?
ps: I have tryed Simon login with my OpenID key and it’s working perfectly ! (Great site by the way Simon).

Hi,
I still can’t mak it. I have played around with snippets name lowercase or CamelCase like. Folder rights ... Geeting into code to try to understanst what’s was happening ... trying to configure error message display (which I’m not sure it’s working well as I still have no error showing ...).
I’m really stuck.
I have even tried extremswank.com MODx implementation (http://extremeswank.com/modx_authopenid.html) : I can authenticate myself but behavior is wierd and Its not integrated to current modx WebSignin auth as Wincefr solution seems to be.


Is there someone which already succeed in making OpenID authetification work ?

Why at attempt to login with weblogin I receive this error:

INCLUDE_ORDERING_ERROR
Please use the MODx Content Manager instead of accessing this file directly.

I use an usual snippet call like:

Any updates to this project???