Author Topic: How to enable OpenID for existing users? (Read 13341 times)

ibookdb · « **on:** March 19, 2008, 10:44:04 AM »

Is there a way for an existing user to change from password based authentication to OpenID?

metallica48423 · « **Reply #1 on:** March 19, 2008, 07:59:50 PM »

have you tried messing with the openid_uri in the members table to see if it'd allow the open ID login?

ibookdb · « **Reply #2 on:** March 20, 2008, 08:54:22 AM »

I did, it does allow openid but I really don't want to manually enter stuff in there. If you already register using OpenID, you can change to password based authentication from your profile settings. But the reverse is not possible. I don't wan't to go about doing customizations if they will be made in the future in SMF itself.

Owdy · « **Reply #3 on:** March 20, 2008, 01:41:22 PM »

This should be in user profile settings.

edit: i added my openid uri to my profile, it wont work. It wants me to register.

edit2: okay, fixed. Missed http:// part.

Owdy · « **Reply #4 on:** March 20, 2008, 02:21:55 PM »

Quote from: ibookdb on March 20, 2008, 08:54:22 AM

If you already register using OpenID, you can change to password based authentication from your profile settings. But the reverse is not possible.

Yeah, i see that now. Why isnt that reverse? I could use openid in many SMF sites (like in here) in future, but i dont wanna create new account in every site.

metallica48423 · « **Reply #5 on:** March 20, 2008, 03:20:36 PM »

I'll ask around in the team boards and see what the consensus on this is.

For now though you should be able to change it manually for those who would prefer to use openid

I am not certain that OpenID implementation is finished as of yet, though, so just fair warning that some things may not work yet with it.

Owdy · « **Reply #6 on:** March 20, 2008, 03:24:53 PM »

Quote from: metallica48423 on March 20, 2008, 03:20:36 PM

I am not certain that OpenID implementation is finished as of yet, though, so just fair warning that some things may not work yet with it.

Okay, maybe i should wait RC versions

metallica48423 · « **Reply #7 on:** March 20, 2008, 03:29:44 PM »

I state that mostly because i haven't had the chance to look at it in detail, I knew that in 2.0 Beta 2 implementation wasn't yet complete, but I've had like less than zero time to actually do any real testing on it

weightman · « **Reply #8 on:** March 20, 2008, 04:15:07 PM »

I can't seem to log in using OpenId. The forum gives me the message "The signature from the identity provider is invalid. " What am I supposed to enter in the OpenId login blank? The PIP url? The OpenId username? Neither seems to work, but maybe I am doing something wrong?

Thanks

metallica48423 · « **Reply #9 on:** March 20, 2008, 04:17:43 PM »

the entire identity URI, starting with http://

weightman · « **Reply #10 on:** March 20, 2008, 04:21:51 PM »

Hmmm, yea I tried it with the http:// already. I am using VeriSign for my OpenID, if it matters. Has anyone used OpenId successfully?

ibookdb · « **Reply #11 on:** March 20, 2008, 04:33:52 PM »

Quote from: weightman on March 20, 2008, 04:21:51 PM

Hmmm, yea I tried it with the http:// already. I am using VeriSign for my OpenID, if it matters. Has anyone used OpenId successfully?

Yes I have used that sucessfully on my test forum. PM me or email contact@ibookdb.net for a link. My openid is from myopenid.com

Thantos · « **Reply #12 on:** March 21, 2008, 10:56:14 AM »

Quote from: weightman on March 20, 2008, 04:21:51 PM

Hmmm, yea I tried it with the http:// already. I am using VeriSign for my OpenID, if it matters. Has anyone used OpenId successfully?

IIRC VeriSign uses https at some point during the process. Currently we can not do https.

Owdy · « **Reply #13 on:** March 21, 2008, 11:10:21 AM »

I use myopenid.com. I created Persona in myopenid.com with same username and same nickname as my forum profile was. Then i put my openID in database as http://hgsdkhsgdfkjhsg.com/ and i log in just as hgsdkhsgdfkjhsg.com and it works.

weightman · « **Reply #14 on:** March 21, 2008, 11:30:07 AM »

Quote

IIRC VeriSign uses https at some point during the process. Currently we can not do https.

Ahh, any chance it will be supported in future versions? It would also be nice to have a little more info for the members in the opnid login panel, something that makes it clear the blank is for openid (heading) and maybe a statement saying not all providers are supported (https)...

Thanks

JeffersonRyan · « **Reply #15 on:** March 23, 2008, 07:44:34 PM »

This is not a cry for help. I´m only reporting the behaviour in my setup.

OpenID login not working for me, too.

I´m using myOpenID as my provider. And it is using https in the login process, as Verisign.

myOpenID says my URL is "http://Jefferson.Ryan.myopenid.com/ [nofollow]", but if I paste exactly this in the SMF login box, SMF returns the error:

"The requested identifier did not return the proper information. "

I knew in advance that URL was strange, so I changed all to lowercase, as in: "http://jefferson.ryan.myopenid.com/ [nofollow]" and tried again. SMF replies:

"The signature from the identity provider is invalid. "

It does not make difference if I configure myOpenID to "safe login" or not.

As a side note, the mixed case myOpenID URL works in the blogger.com comments login.

JeffersonRyan · « **Reply #16 on:** March 23, 2008, 07:55:20 PM »

I found additional info in the forum error log.

Every login attemp generates two errors like these (I don´t think there is sensitive information here, so I´m pasting everything):

Second error

Type of error: Critical

http://jesierla.com/smf/index.php?action=openidreturn&sa=login2&t=1206238013&openid.assoc_handle=%7BHMAC-SHA1%7D%7B47e5bb3d%7D%7BxyBYfg%3D%3D%7D&openid.identity=http%3A%2F%2Fjefferson.ryan.myopenid.com%2F&openid.mode=id_res&openid.op_endpoint=http%3A%2F%2Fwww.myopenid.com%2Fserver&openid.response_nonce=2008-03-23T02%3A06%3A58ZXhQ83Q&openid.return_to=http%3A%2F%2Fjesierla.com%2Fsmf%2Findex.php%3Faction%3Dopenidreturn%26sa%3Dlogin2%26t%3D1206238013&openid.sig=LjbAPEE2ADgnWCIM9BX4PWKuoEQ%3D&openid.signed=assoc_handle%2Cidentity%2Cmode%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned%2Csreg.dob%2Csreg.gender%2Csreg.nickname&openid.sreg.dob=1971-08-04&openid.sreg.gender=M&openid.sreg.nickname=Jeff [nofollow]

The signature from the identity provider is invalid.

First Error

Type of error: General

http://jesierla.com/smf/index.php?action=openidreturn&sa=login2&t=1206238013&openid.assoc_handle=%7BHMAC-SHA1%7D%7B47e5bb3d%7D%7BxyBYfg%3D%3D%7D&openid.identity=http%3A%2F%2Fjefferson.ryan.myopenid.com%2F&openid.mode=id_res&openid.op_endpoint=http%3A%2F%2Fwww.myopenid.com%2Fserver&openid.response_nonce=2008-03-23T02%3A06%3A58ZXhQ83Q&openid.return_to=http%3A%2F%2Fjesierla.com%2Fsmf%2Findex.php%3Faction%3Dopenidreturn%26sa%3Dlogin2%26t%3D1206238013&openid.sig=LjbAPEE2ADgnWCIM9BX4PWKuoEQ%3D&openid.signed=assoc_handle%2Cidentity%2Cmode%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned%2Csreg.dob%2Csreg.gender%2Csreg.nickname&openid.sreg.dob=1971-08-04&openid.sreg.gender=M&openid.sreg.nickname=Jeff [nofollow]

2: Wrong parameter count for sha1()

File: /home/jeffryan/public_html/jesierla/smf/Sources/Subs-OpenID.php
Line: 442

Owdy · « **Reply #17 on:** March 24, 2008, 04:37:50 AM »

Quote from: JeffersonRyan on March 23, 2008, 07:44:34 PM

myOpenID says my URL is "http://Jefferson.Ryan.myopenid.com/", but if I paste exactly this in the SMF login box, SMF returns the error:

"The requested identifier did not return the proper information. "

Try "Jefferson.Ryan.myopenid.com" or "jefferson.ryan.myopenid.com". Works for me that way. I use myopenid also.

ibookdb · « **Reply #18 on:** March 24, 2008, 08:49:10 AM »

I use myopenid too and it works for me. Do any of you mind trying it out at my test forum? Please PM me, I don't want to make the link publicly available.

H · « **Reply #19 on:** April 03, 2008, 04:23:03 PM »

Marking this as solved although personally I'd still like to see the ability to 'convert' to OpenID in the future

News:

Author Topic: How to enable OpenID for existing users? (Read 13341 times)