Luke Tucker wrote:
Thanks Phil!
I also thought of a couple of related cases which are not yet covered:
Do you mean "not covered" by those case studies or not covered by melkjug?
* You cannot associate a password with an username that was created with an openid (restricted to only openid login)
* You cannot change your openid
The model for this is not to simply change an OpenID, but to add an additional OpenID (and is covered by a couple of the examples I documented). If for some reason you'd like to delete an OpenID, you can do that as well, but you wouldn't change one as you might change your email address. The ability to rely on multiple different IDs and providers is one of the core concepts of the OpenID model. If you're storing OpenIDs the same way you would a normal username, you might want to reconsider because they should really be provided as a many-to-one relationship in a database.

-phil
- Luke
On Feb 23, 2009, at 11:40 AM, Philip Ashlock wrote:

Looks like I never clicked send for this last week:
---

I documented some examples of UI for associating an openid with an existing account
http://www.flickr.com/photos/philaestheta/tags/associateopenid/


and found a few cases of associating an account with an existing openid (eg if someone uses openid to create an account):
http://www.flickr.com/photos/factoryjoe/415701438/in/set-72157600010029792/
http://www.flickr.com/photos/factoryjoe/425802569/in/set-72157600010029792/


*Regarding openid for mobile:*

    * skitch has an example of using a proxy account for an openid so
      you can use a username/password for the desktop app (not the
      ideal solution considering it breaks the utility of openid)  -
      http://www.flickr.com/photos/philaestheta/3295629585/
    * The OpenID mobile experience, part II
      
<http://factoryjoe.com/blog/2008/05/17/the-openid-mobile-experience-part-ii/>
    * Valimo Wireless Introduces Mobile Authentication for OpenID
      
<http://www.valimo.com/news_and_events/16-02-2009/valimo-wireless-introduces-mobile-authentication-openid>
      - February 16, 2009

-phil

Joshua Bronson wrote:
Hey Phil,

Thanks for the report. I've ticketed it at http://trac.openplans.org/melkjug/ticket/342. Feel free to ticket any other issues you have there or just let me know and I can do it if you prefer.

I think it shouldn't be too hard to allow an openid to be associated with an existing account logicwise; we'd just have to come up with the UI for it. Melkjug currently has no 'manage your account' type page, so maybe this should either wait until it needs to grow one, or maybe we could simply add an 'add your openid' to the user home page. Thoughts?

Josh

On Wed, Feb 18, 2009 at 1:43 AM, Philip Ashlock <[email protected] <mailto:[email protected]>> wrote:

    I think the problem I've had with OpenID on melkjug is that I
    can't associate an OpenID with my existing account. If i simply
    try to login with openid, I receive the error message "unable to
    authenticate". It seems that I'm able to create a new account by
    simply using openID which is awesome as it's common for many
    services to force you to first create a normal account and then
    have you associate an openid with it.

    Should i ticket this somewhere?

    -phil



Reply via email to