[ 
https://issues.apache.org/jira/browse/SHIRO-21?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13028378#comment-13028378
 ] 

Maria Jurcovicova commented on SHIRO-21:
----------------------------------------

Hi,

the patch adds Open4jFilter into shiro-open4j sub-project. It is meant as a 
reaction to:

> You can see the existing implementation in the 'support/openid4j' module 
> (commit logs are attached to this issue). If anyone wants > to help out, 
> we're open! 

Filter collects either personal OpenId url from user or OpenId provider url and 
redirect user to providers authentication page (for example Google account 
page). It also listens for OpenId authentication answer, verifies it and put 
verification result into authenticationtoken.

RelyingPartyRealm, or any other realm. may then authenticate user into some 
in-application account.

Please ignore original patch, I forgot to include one method. Correct patch 
files are patch-shiro-openid4j-01.patch and patch-shiro-web-01.patch.


Filter configuration in ini file:

authenticatingFilter = org.apache.shiro.openid4j.authc.Open4jFilter
# page that performs redirect to OpenId provider login page
authenticatingFilter.redirectToUrl=/account/formredirection.jsp
# url where the application listens for OpenId provider answers
authenticatingFilter.openIdResponseUrl=/simpleshirosecuredapplication/openid

# request parameter with login error information; if not present filter assumes 
'shiroLoginFailure'
authenticatingFilter.failureKeyAttribute=simpleShiroApplicationLoginFailure
# specify login page
authenticatingFilter.loginUrl = /account/login.jsp
# redirect after successful login
authenticatingFilter.successUrl  = /account/personalaccountpage.jsp

With Regards,
Maria

> Add OpenId as an authentication mechanism
> -----------------------------------------
>
>                 Key: SHIRO-21
>                 URL: https://issues.apache.org/jira/browse/SHIRO-21
>             Project: Shiro
>          Issue Type: New Feature
>            Reporter: Alan Cabrera
>            Assignee: Les Hazlewood
>         Attachments: patch-OpenId_01.txt, patch-shiro-openid4j-01.patch, 
> patch-shiro-web-01
>
>
> From the forums:
> Are there any plans to incorporate OpenId as an authentication mechanism in 
> JSecurity?
> Mike
> Tue, 02/19/2008 - 2:58pm ? lhazlewood
> Hi Mike, If you would please
> Hi Mike,
> If you would please open an issue for us (http://issues.jsecurity.org), you 
> can bet that we'll try to get it incorporated as soon as possible. Also, if 
> you have any code that you might be able to kickstart us, please include it.
> Thanks!
> Les 

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to