Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openid]

The tag has no usage guidance.

0
votes
0answers
20 views

Open ID Connect: Client-side app and API

I'm developing a client-side application (Vue.js) that consumes an API. I want to secure the API with OpenID Connect. In this case, the Vue.js application is the client and the API is the resource ...
4
votes
0answers
246 views

Should an SPA use OIDC's Implicit flow or Auth Code flow?

We are developing a new Angular SPA which leverages Keycloak for its SSO abilities using OpenID Connect (OIDC). The app is currently designed to use the Implicit flow to retrieve short-lived access ...
1
vote
0answers
82 views

OpenID Connect - UserInfo endpoint Redundant?

Why would we use the userinfo endpoint in OpenID Connect to get information about the user when we can simply include that information in the access token? The UserInfo Endpoint is an OAuth 2.0 ...
0
votes
0answers
26 views

How can I support application rules inside OpenID (and AD B2C)?

Ciao, I'm working on a multi-tenancy web api project. I would integrate OpenID Connect protocol for authentication and authorization (with Azure AD B2C). I known that that with OAuth 2.0 let ...
1
vote
0answers
539 views

What is the “recommended” way of using Asp.Net core, Angular, and OpenID-Connect

I mainly just want a lead in a direction with this. I'm not asking about specific frameworks to use, even if I mention them, just how it's supposed to work. I am trying to get an understand of how ...
4
votes
1answer
351 views

Multiple OAuth2 access_tokens on the same page

We have been tasked with implementing a dashboard containing multiple widgets. The dashboard itself and all widgets need to access various secured APIs. Our authorisation protocol is OpenID. ...
-1
votes
1answer
108 views

How to manage user information with an external user database?

I'm developing an app suite that uses an OpenID Connect provider. But I guess my question works in all situations where there is a separate user info provider. I persist which users create a given ...
0
votes
1answer
374 views

Which OpenID flow should I choose?

I have simple REST API, based on Asp.Net Core technology. Now, I want to add OpenID for this API. API would be used from mobile applications, single page applications and possibly other API services ...
1
vote
1answer
84 views

Does OpenID allow email address to be changed?

I am tasked to design an OpenID provider for the public facing applications of my company. The idea is to authorize the user via an email/PW combination. The subject will be a GUID. Should an user ...
2
votes
1answer
3k views

What OpenID Connect flow is right for me?

Here's the deal. I have a .NET MVC5 web application that I'm moving up to the OpenID Connect standard. I also would like to be able to access controller methods from a mobile app (much like an API) ...
2
votes
0answers
115 views

Switching between Azure Mobile Services vs my own implementation. Will UIDs change?

I'm looking at Azure Mobile Services, particularly the Authentication part (which I believe relies exclusively on OAUTH 1 or 2). I want to make sure that my application isn't tightly coupled to the ...
24
votes
4answers
6k views

How should I architect a RESTful webservice to use 3rd party (i.e. Google, Facebook, Twitter) for authentication?

For my job we have a nice RESTful webservice we've built out that we use to drive a couple websites we have. Basically the webservice lets you create and work with support tickets, and the website is ...
6
votes
1answer
970 views

Authentication for users on a Single Page App?

I have developed a single page app prototype that is using Backbone on the front end and going to consume from a thin RESTful API on the server for it's data. Coming from heavy server side ...
2
votes
1answer
460 views

What's the benefit of Azure ACS if ASP.NET 4.5 includes OAuth and OpenID providers? [closed]

Azure ACS offers OAuth and OpenID providers, and now that ASP.NET 4.5 offers the same thing, without the added cost, is there any reason for a .NET developer to consider ACS? (Disclaimer, I don't ...
3
votes
2answers
291 views

Using Paypal (or similar) to log into my site?

I have a web site and I want to offer a few levels of service - one free, one for a one-off payment, and one for a subscription. My first inclination is to use Paypal for the payment options. I ...
8
votes
1answer
421 views

Using OpenID to log into multiple domains: Is this plan feasable? [closed]

For example: We're running a two community sites on two domains (call them example.com and example.net). We want to be able to expand that to more domains later. We want to allow multiple types of ...
2
votes
3answers
165 views

OpenID and data espionage

This answer[link] to another question here talks about OpenID and data espionage. I quote: [Data espionage] Why let them gather the detailed statistics from many consumer site and help them ...
1
vote
2answers
301 views

Is it a good idea to implement OpenID services in internal and/or customer applications?

I've been discussing with my colleges about logging in by using your OpenID account, Google account etc. in our customers CMS and/or the internal systems we use, as we've had a few requests regarding ...
5
votes
1answer
773 views

OpenID implementation - PHP, Javascript, MySQL

I've started doing some research on the technologies that I will need for my website. I'm trying to implement a really simple website with OpenID user registration. The website will store a block of ...
31
votes
5answers
2k views

is OpenID really that bad?

I have seen this question on Quora where lots of people seem to agree that OpenID is bad, even going as far as stating that: OpenID is the worst possible "solution" I have ever seen in my entire ...
5
votes
5answers
347 views

Does anybody ever uses the OpenId url Log in?

As programmers I think we are the most inclined to use new technologies and things that are not so mainstream. I absolutely love OpenId's ability to log in with credentials you already have, but I ...