identify accounts using zend-openid [HELP]
- by tawfekov
Hi! ,
i had successfully implemented simple open ID authentication with the [gmail , yahoo , myopenid, aol and many others ] exactly as stackoverflow do but i had a problem with identifying accounts for example
'openid_ns' => string 'http://specs.openid.net/auth/2.0' (length=32)
'openid_mode' => string 'id_res' (length=6)
'openid_op_endpoint' => string 'https://www.google.com/accounts/o8/ud' (length=37)
'openid_response_nonce' => string '2010-05-02T06:35:40Z9YIASispxMvKpw' (length=34)
'openid_return_to' => string 'http://dev.local/download/index/gettingback' (length=43)
'openid_assoc_handle' => string 'AOQobUf_2jrRKQ4YZoqBvq5-O9sfkkng9UFxoE9SEBlgWqJv7Sq_FYgD7rEXiLLXhnjCghvf' (length=72)
'openid_signed' => string 'op_endpoint,claimed_id,identity,return_to,response_nonce,assoc_handle' (length=69)
'openid_sig' => string 'knieEHpvOc/Rxu1bkUdjeE9YbbFX3lqZDOQFxLFdau0=' (length=44)
'openid_identity' => string 'https://www.google.com/accounts/o8/id?id=AItOawk0NAa51T3xWy-oympGpxFj5CftFsmjZpY' (length=80)
'openid_claimed_id' => string 'https://www.google.com/accounts/o8/id?id=AItOawk0NAa51T3xWy-oympGpxFj5CftFsmjZpY' (length=80)
i thought that openid_claimed_id or openid_identity is identical for every account but after some testing turns out the claimed id is changeable by the users them self in yahoo
and randomly changing in case of gmail
FYI am using zend openid with a bit modification on consumer class and i can't use SERG [Simple Refistration Extension] cuz currently it uses openid v1 specification :(
i hadn't read the specification of openid so
if any body know please help me to
how to identify openid accounts to know if this account has signed in before or not
