Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Fake Open ID provider for testing purposes

Like SO, I am gonna depend on many Open ID providers to provide user authentication and I will use my own authorization methods. but I'm still in development phase, and don't want to work with real OpenID providers currently, what approach can I use to test my users and their activities in the website (w/o TDD), to emulate real users but not really use Open ID providers.

No need to make auto-transfer of users into real OpenID servers (when moving to production mode) since the current users are just for testing purposes and Unit-test code.

I guess, I need a User Service layer which provides a higly abstracted way to deal with users, so that the move to the real Open ID providers can be smooth in the future and doesn't affect the logic of my already written code.

Using C#.Net 4, ASP.Net MVC 3, Ninject

like image 908
Ken D Avatar asked Jul 01 '11 22:07

Ken D


People also ask

Is Google an OpenID provider?

Google's OAuth 2.0 APIs can be used for both authentication and authorization. This document describes our OAuth 2.0 implementation for authentication, which conforms to the OpenID Connect specification, and is OpenID Certified.

What is OIDC provider?

IAM OIDC identity providers are entities in IAM that describe an external identity provider (IdP) service that supports the OpenID Connect (OIDC) standard, such as Google or Salesforce. You use an IAM OIDC identity provider when you want to establish trust between an OIDC-compatible IdP and your AWS account.

What is the difference between oauth2 and OpenID?

The main differentiator between these three players is that OAuth 2.0 is a framework that controls authorization to a protected resource such as an application or a set of files, while OpenID Connect and SAML are both industry standards for federated authentication.

What is SAML and OpenID?

SAML (SAML 1.0 and 2.0) and OpenID Connect (OIDC) are identity protocols, designed to authenticate users, and provide identity data for access control and as a communication method for a user's identity.


1 Answers

DotNetOpenAuth provides both server and client portions of OpenID and can be used to run your own OpenID provider for local testing.

  • Give your site members their own OpenIDs with the provider support included in this library.

  • Sample relying party and provider web sites show you just how to do it.

like image 77
Samuel Neff Avatar answered Oct 07 '22 05:10

Samuel Neff