Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: ibookdb on March 19, 2008, 10:44:04 AM

Title: How to enable OpenID for existing users?
Post by: ibookdb on March 19, 2008, 10:44:04 AM
Is there a way for an existing user to change from password based authentication to OpenID?
Title: Re: How to enable OpenID for existing users?
Post by: metallica48423 on March 19, 2008, 07:59:50 PM
have you tried messing with the openid_uri in the members table to see if it'd allow the open ID login?
Title: Re: How to enable OpenID for existing users?
Post by: ibookdb on March 20, 2008, 08:54:22 AM
I did, it does allow openid but I really don't want to manually enter stuff in there. If you already register using OpenID, you can change to password based authentication from your profile settings. But the reverse is not possible. I don't wan't to go about doing customizations if they will be made in the future in SMF itself.
Title: Re: How to enable OpenID for existing users?
Post by: Owdy on March 20, 2008, 01:41:22 PM
This should be in user profile settings.

edit: i added my openid uri to my profile, it wont work. It wants me to register.

edit2: okay, fixed. Missed http:// part.
Title: Re: How to enable OpenID for existing users?
Post by: Owdy on March 20, 2008, 02:21:55 PM
Quote from: ibookdb on March 20, 2008, 08:54:22 AM
If you already register using OpenID, you can change to password based authentication from your profile settings. But the reverse is not possible.
Yeah, i see that now. Why isnt that reverse? I could use openid in many SMF sites (like in here) in future, but i dont wanna create new account in every site.
Title: Re: How to enable OpenID for existing users?
Post by: metallica48423 on March 20, 2008, 03:20:36 PM
I'll ask around in the team boards and see what the consensus on this is. 

For now though you should be able to change it manually for those who would prefer to use openid :)

I am not certain that OpenID implementation is finished as of yet, though, so just fair warning that some things may not work yet with it.
Title: Re: How to enable OpenID for existing users?
Post by: Owdy on March 20, 2008, 03:24:53 PM
Quote from: metallica48423 on March 20, 2008, 03:20:36 PM
I am not certain that OpenID implementation is finished as of yet, though, so just fair warning that some things may not work yet with it.
Okay, maybe i should wait RC versions :)
Title: Re: How to enable OpenID for existing users?
Post by: metallica48423 on March 20, 2008, 03:29:44 PM
I state that mostly because i haven't had the chance to look at it in detail, I knew that in 2.0 Beta 2 implementation wasn't yet complete, but I've had like less than zero time to actually do any real testing on it :P
Title: Re: How to enable OpenID for existing users?
Post by: weightman on March 20, 2008, 04:15:07 PM
I can't seem to log in using OpenId. The forum gives me the message "The signature from the identity provider is invalid. " What am I supposed to enter in the OpenId login blank? The PIP url? The OpenId username? Neither seems to work, but maybe I am doing something wrong?

Thanks
Title: Re: How to enable OpenID for existing users?
Post by: metallica48423 on March 20, 2008, 04:17:43 PM
the entire identity URI, starting with http://
Title: Re: How to enable OpenID for existing users?
Post by: weightman on March 20, 2008, 04:21:51 PM
Hmmm, yea I tried it with the http:// already. I am using VeriSign for my OpenID, if it matters. Has anyone used OpenId successfully?
Title: Re: How to enable OpenID for existing users?
Post by: ibookdb on March 20, 2008, 04:33:52 PM
Quote from: weightman on March 20, 2008, 04:21:51 PM
Hmmm, yea I tried it with the http:// already. I am using VeriSign for my OpenID, if it matters. Has anyone used OpenId successfully?

Yes I have used that sucessfully on my test forum. PM me or email [email protected] for a link. My openid is from myopenid.com
Title: Re: How to enable OpenID for existing users?
Post by: Thantos on March 21, 2008, 10:56:14 AM
Quote from: weightman on March 20, 2008, 04:21:51 PM
Hmmm, yea I tried it with the http:// already. I am using VeriSign for my OpenID, if it matters. Has anyone used OpenId successfully?
IIRC VeriSign uses https at some point during the process.  Currently we can not do https.
Title: Re: How to enable OpenID for existing users?
Post by: Owdy on March 21, 2008, 11:10:21 AM
I use myopenid.com. I created Persona in myopenid.com with same username and same nickname as my forum profile was. Then i put my openID in database as http://hgsdkhsgdfkjhsg.com/ and i log in just as hgsdkhsgdfkjhsg.com and it works.
Title: Re: How to enable OpenID for existing users?
Post by: weightman on March 21, 2008, 11:30:07 AM
QuoteIIRC VeriSign uses https at some point during the process.  Currently we can not do https.

Ahh, any chance it will be supported in future versions? It would also be nice to have a little more info for the members in the opnid login panel, something that makes it clear the blank is for openid (heading) and maybe a statement saying not all providers are supported (https)...

Thanks
Title: Re: How to enable OpenID for existing users?
Post by: JeffersonRyan on March 23, 2008, 07:44:34 PM
This is not a cry for help. I´m only reporting the behaviour in my setup.

OpenID login not working for me, too.

I´m using myOpenID as my provider. And it is using https in the login process, as Verisign.

myOpenID says my URL is "http://Jefferson.Ryan.myopenid.com/", but if I paste exactly this in the SMF login box, SMF returns the error:

"The requested identifier did not return the proper information. "

I knew in advance that URL was strange, so I changed all to lowercase, as in:  "http://jefferson.ryan.myopenid.com/" and tried again. SMF replies:

"The signature from the identity provider is invalid. "

It does not make difference if I configure myOpenID to "safe login" or not.

As a side note, the mixed case myOpenID URL works in the blogger.com comments login.




Title: Re: How to enable OpenID for existing users?
Post by: JeffersonRyan on March 23, 2008, 07:55:20 PM
I found additional info in the forum error log.

Every login attemp generates two errors like these (I don´t think there is sensitive information here, so I´m pasting everything):

Second error


Type of error: Critical 

http://jesierla.com/smf/index.php?action=openidreturn&sa=login2&t=1206238013&openid.assoc_handle=%7BHMAC-SHA1%7D%7B47e5bb3d%7D%7BxyBYfg%3D%3D%7D&openid.identity=http%3A%2F%2Fjefferson.ryan.myopenid.com%2F&openid.mode=id_res&openid.op_endpoint=http%3A%2F%2Fwww.myopenid.com%2Fserver&openid.response_nonce=2008-03-23T02%3A06%3A58ZXhQ83Q&openid.return_to=http%3A%2F%2Fjesierla.com%2Fsmf%2Findex.php%3Faction%3Dopenidreturn%26sa%3Dlogin2%26t%3D1206238013&openid.sig=LjbAPEE2ADgnWCIM9BX4PWKuoEQ%3D&openid.signed=assoc_handle%2Cidentity%2Cmode%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned%2Csreg.dob%2Csreg.gender%2Csreg.nickname&openid.sreg.dob=1971-08-04&openid.sreg.gender=M&openid.sreg.nickname=Jeff 

The signature from the identity provider is invalid.

First Error


Type of error: General 

http://jesierla.com/smf/index.php?action=openidreturn&sa=login2&t=1206238013&openid.assoc_handle=%7BHMAC-SHA1%7D%7B47e5bb3d%7D%7BxyBYfg%3D%3D%7D&openid.identity=http%3A%2F%2Fjefferson.ryan.myopenid.com%2F&openid.mode=id_res&openid.op_endpoint=http%3A%2F%2Fwww.myopenid.com%2Fserver&openid.response_nonce=2008-03-23T02%3A06%3A58ZXhQ83Q&openid.return_to=http%3A%2F%2Fjesierla.com%2Fsmf%2Findex.php%3Faction%3Dopenidreturn%26sa%3Dlogin2%26t%3D1206238013&openid.sig=LjbAPEE2ADgnWCIM9BX4PWKuoEQ%3D&openid.signed=assoc_handle%2Cidentity%2Cmode%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned%2Csreg.dob%2Csreg.gender%2Csreg.nickname&openid.sreg.dob=1971-08-04&openid.sreg.gender=M&openid.sreg.nickname=Jeff 

2: Wrong parameter count for sha1()

File: /home/jeffryan/public_html/jesierla/smf/Sources/Subs-OpenID.php
Line: 442 

Title: Re: How to enable OpenID for existing users?
Post by: Owdy on March 24, 2008, 04:37:50 AM
Quote from: JeffersonRyan on March 23, 2008, 07:44:34 PM
myOpenID says my URL is "http://Jefferson.Ryan.myopenid.com/", but if I paste exactly this in the SMF login box, SMF returns the error:

"The requested identifier did not return the proper information. "
Try "Jefferson.Ryan.myopenid.com" or "jefferson.ryan.myopenid.com". Works for me that way. I use myopenid also.
Title: Re: How to enable OpenID for existing users?
Post by: ibookdb on March 24, 2008, 08:49:10 AM
I use myopenid too and it works for me. Do any of you mind trying it out at my test forum? Please PM me, I don't want to make the link publicly available.
Title: Re: How to enable OpenID for existing users?
Post by: H on April 03, 2008, 04:23:03 PM
Marking this as solved although personally I'd still like to see the ability to 'convert' to OpenID in the future
Title: Re: How to enable OpenID for existing users?
Post by: Grudge on April 03, 2008, 06:04:36 PM
There's no link for it yet but you should be able to go to:
http://www.yourwebsite.com/community/index.php?action=profile;sa=authentication

At the moment the link to that is only shown if you are using OpenID and want to switch to non-openID, and not the reverse. Note that you cannot be an admin and use OpenID for security purposes.