Hi! I'm currently adding OpenID authentication support to XWiki but I'm experiencing some problems with the current architecture.
First of all the current architecture doesn't support multiple authenticators simultaneously (at least I didn't find how). I wanted to add OpenID as an additional (optional) authentication method as shown in my proposal at http://dev.xwiki.org/xwiki/bin/view/Design/SingleSignOn. This is not possible with the current design - at least not in an elegant manner. Should I add OpenID so that it is always shown if the MyFormAuthenticator is used? Or should I think about how we could make XWiki more flexible? I can't implement the whole XWikiAuthService interface because OpenID doesn't use passwords. This could cause problems. Should we change that interface or create a new one for authentication methods that rely only on XWikiContext? I need a mechanism to handle the response of the OpenID provider (at a known URL). What's the best approach for that? Using an action, a servlet, ...? I need to parse and evaluate the response and depending on return to the login form showing an error message or logging in the user and forwarding it to the requested resource. Thanks, Markus _______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
