Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

OpenID development and debugging tools

Tags:

openid

Any pointers to development, primarily debugging tools, for OpenID? In particular, I'm looking for a tool to record and view the OpenID traffic through the User-Agent during an indirect communication authentication session. An OpenID provider and relying party that offered debugging info about authentication attempts would be nice, too.

Yes, I've asked Mr. Google about this, and haven't hit the right keywords or I wouldn't be asking here. I can build this myself, but if someone else has already done the work...

Thanks for any help.

like image 413
Fred Avatar asked Apr 12 '09 06:04

Fred


People also ask

What is an example of OpenID?

Logging into Spotify with your Facebook account is a good example of how OpenID could be applied: You log into Facebook. Facebook sends your name and e-mail to Spotify. Spotify uses those details to identify you.

What is the difference between oauth2 and OpenID?

OpenID vs. OAuth. Simply put, OpenID is used for authentication while OAuth is used for authorization. OpenID was created for federated authentication, meaning that it lets a third-party application authenticate users for you using accounts that you already have.

Is LDAP an OpenID?

The service builds upon an open source implementation of the OpenID Connect standard for token-based authorization and Lightweight Directory Access Protocol (LDAP) for secure user management.


1 Answers

The DotNetOpenAuth library does both RP and OP and has very verbose logging for diagnostic purposes, which can be tuned to whatever logs you're interested in. You can use it to test against your OpenID site, regardless of what its platform is.

You can check out a sample of the logs by logging into the demo RP and then visiting the log page that it accumulated from your login.

Then there's the equivalent demo OP and the associated log page.

If you like what you see, you can either just use these sites yourself to test your OpenID site against, or you can download DotNetOpenAuth and use it locally and further customize the logs.

like image 64
Andrew Arnott Avatar answered Sep 29 '22 10:09

Andrew Arnott