From Fedora Project Wiki

 
(11 intermediate revisions by 6 users not shown)
Line 5: Line 5:
= Using =
= Using =


We have an [http://en.wikipedia.org/wiki/OpenID OpenID] provider running named FAS-OpenID.
We have an [http://en.wikipedia.org/wiki/OpenID OpenID] provider running named FedOAuth.


When trying to log on to an OpenID enabled site, give <pre>username.id.fedoraproject.org</pre> as URL. Example, if your FAS login is ''JohnDoe'', you would enter ''JohnDoe.id.fedoraproject.org''. If you are not logged in to FAS at this stage, you will be first taken to the FAS-OpenID login page. On the first login from each external site, you will be taken to id.fedoraproject.org and asked to approve the OpenID request.
When trying to log on to an OpenID enabled site, give <pre>username.id.fedoraproject.org</pre> as URL. Example, if your FAS login is ''JohnDoe'', you would enter ''JohnDoe.id.fedoraproject.org''. If you are not logged in to FAS at this stage, you will be first taken to the FedOAuth login page. On the first login from each external site, you will be taken to id.fedoraproject.org and asked to approve the OpenID request.
 
== Old provider link ==
 
There was an old (and non advertised) link at https://admin.fedoraproject.org/accounts/openid/id/username to the old openid provider. These links are no longer used, you should always use the above link instead.  


== Screenshots ==
== Screenshots ==
Line 23: Line 19:
= contributing =
= contributing =
== git ==
== git ==
<code>git clone ssh://git.fedorahosted.org/git/fas-openid.git</code>
<code>https://pagure.io/ipsilon</code>


== upstream ==
== upstream ==
FAS-OpenID was written by [[User:puiterwijk]]
Ipsilon (was called FedOAuth) was written by [[User:puiterwijk | Patrick Uiterwijk]].
A good place to start is trying to understand the OpenID [http://openid.net/developers/specs/ spec]
 
A good place to start learning about OpenID and FedOAuth would be this [http://meetbot.fedoraproject.org/fedora-classroom/2013-02-22/fas-openid-class.2013-02-22-18.00.log.html classroom].


= history =
= history =
OpenID was first [[https://fedoraproject.org/wiki/FedoraSummit/OpenId discussed]] at the 2006 [[FedoraSummit]].
OpenID was first [[FedoraSummit/OpenId|discussed]] at the 2006 [[FedoraSummit]].
 
The OpenID implementation was completely rewritten from scratch in 2013.
The OpenID implementation was completely rewritten from scratch in 2013.
Persona support was added in 2014. The Mozilla Persona service was discontinued in November 2016, with Mozilla recommending that users find other options and not try to self-host persona.


= thanks =
= thanks =
Many thanks to [[User:Ricky]] for his explanations on IRC.
Many thanks to [[User:Ricky]] for his explanations on IRC.

Latest revision as of 04:29, 8 March 2017

Background

OpenID is a way to login to applications or resources using an existing account that acts as a identity provider. The Fedora project acts as an OpenID identity provider for anyone with a Fedora Account System account.

Using

We have an OpenID provider running named FedOAuth.

When trying to log on to an OpenID enabled site, give

username.id.fedoraproject.org

as URL. Example, if your FAS login is JohnDoe, you would enter JohnDoe.id.fedoraproject.org. If you are not logged in to FAS at this stage, you will be first taken to the FedOAuth login page. On the first login from each external site, you will be taken to id.fedoraproject.org and asked to approve the OpenID request.

Screenshots

Screenshots are here.

Feedback

OpenID should work for all websites accepting OpenID login. We are looking for feedback and developers to improve the code. Send feedback to the fedora infrastructure list, #fedora-admin on irc.freenode.net or in a infrastructure ticket.

contributing

git

https://pagure.io/ipsilon

upstream

Ipsilon (was called FedOAuth) was written by Patrick Uiterwijk.

A good place to start learning about OpenID and FedOAuth would be this classroom.

history

OpenID was first discussed at the 2006 FedoraSummit.

The OpenID implementation was completely rewritten from scratch in 2013.

Persona support was added in 2014. The Mozilla Persona service was discontinued in November 2016, with Mozilla recommending that users find other options and not try to self-host persona.

thanks

Many thanks to User:Ricky for his explanations on IRC.