Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is there a Spring Security OpenId Registration like stackoverflow?

I cannot find a complete example anywhere of a Spring Security Web App with Open Id registration similar to stackoverflows.

I would say I'm pretty techy guy but I find Spring Security extremely intimidating with its weird Spring XML DSL.

I have found bits and pieces of how one would do the good ole' stackoverflow registration using:

  • Spring Security Open ID sample WAR
  • Hillerts Blog 3 part blog posting
  • Spring Security Official Doc on OpenId (the email attributes are wrong see next link)
  • Stackoverflow posting about email attributes
  • JQuery OpenId library for picking your OpenId provider Stackoverflow has a modified one that seems to include Facebook
  • Best Article on the subject but a little long winded
  • Another example like previous one for Google App Engine

But no complete examples (WAR). Does anyone know or have a working example (ie WAR) that does more than just authenticate with an in-memory openid urls?

UPDATE: The latest version of Spring Social does a very good job of managing Oauth registration. We ended up using it instead. Although its not OpenId I have grown to prefer Oauth over OpenId. For those interested in there is a project to use OpenId with spring social: https://github.com/molindo/spring-social-openid

like image 702
Adam Gent Avatar asked Aug 26 '10 01:08

Adam Gent


4 Answers

Have you looked at the latest version of the sample code (for the 3.1 release)?

It has several improvements to make it simpler to use Google and Yahoo authentication together (with different attribute exchange configurations simultaneously), uses a similar login dialog to stack overflow and performs simple registration in the case of users who have not previously accessed the app.

See this issue https://jira.springsource.org/browse/SEC-1431 (and the linked one) for more information.

like image 174
Shaun the Sheep Avatar answered Nov 10 '22 08:11

Shaun the Sheep


I know this is not really helpful in answering your Question but I am currently building a Grails based web application and initailly started using Spring Security but also found it difficult to setup.

I then changed to Apache Shiro and it is much simpler to implement. But it doesn't have support for openid out of the box, but the nimble grails plugin does so you may be able to use that as an example to write your own.

like image 1
eaglestorm Avatar answered Nov 10 '22 08:11

eaglestorm


Yes,

There is a war to download on http://repo1.maven.org/maven2/org/springframework/security/spring-security-samples-openid/3.0.1.RELEASE/

Maybe it can help you.

like image 1
Beccari Avatar answered Nov 10 '22 06:11

Beccari


It's not exactly OpenID, it uses Facebook Connect, but checkout Spring's GreenHouse. That's great code written by the guys from Spring you can use to jumpstart your app.

like image 1
Felipe Oliveira Avatar answered Nov 10 '22 07:11

Felipe Oliveira