"面向Java Web应用程序的OpenID认证协议翻译与应用"

22 浏览量更新于2024-01-25 收藏 143KB DOC 举报

OpenID for Java Web applications is a decentralized authentication protocol that simplifies user access to resources in Java™ Web applications. This article provides an overview of the OpenID Authentication Specification and outlines the process of integrating it into a sample Java application. Instead of developing the OpenID Authentication code from scratch, the article suggests leveraging existing Java libraries for seamless integration. The authentication process involves the user providing their OpenID URL, the application requesting verification from the OpenID provider, and the provider confirming the user's identity. The article emphasizes the importance of implementing secure authentication practices to protect user information. Additionally, it discusses the benefits of using OpenID, such as reducing the need for multiple usernames and passwords across different websites. Ultimately, the article serves as a resource for Java developers looking to enhance the authentication process in their web applications using OpenID.

****专科毕业设计（专业外文翻译）

OpenID!

Of course, as with any awesome technology there are numerous OpenID providers to

choose from (see Resources for a complete list).

To illustrate how quick and easy it is to get an OpenID, I signed up with accounts at

myOpenID, Verisign, and ClaimID in the space of about 30 minutes. And that includes

time spent entering detailed information and uploading a picture!

You may already have an OpenID

According to OpenId.net, Google, Wordpress, and other popular sites support OpenID.

If you've signed up for any of these sites you may already have an OpenID.

For instance, if you have a Yahoo! Account, you probably also have an OpenID (I did,

and didn't even know it). You just use your Yahoo! ID when you sign in, and Yahoo is your

OpenID Provider. You provide your Yahoo-based OpenID as whatever@yahoo.com and

the RP will ask Yahoo to authenticate you (you can actually see this in action if you run the

sample application that accompanies this article).

About the sample application

As I said at the beginning of this article, I've written a Java Web application that uses

openid4java to create a simple OpenID Relying Party (RP). It is a simple application that

you can build (as a WAR), drop into Tomcat, and run from your local machine. The sample

application has a very tight focus:

The user enters her OpenID on a registration page.

The application verifies the Identifier (by directing the user to her OP to sign in).

Upon successful authentication, the application retrieves the user's profile information

from the OP, and directs the user to a Save page where she can review and save her profile

information.

The information displayed on the Save page is pulled from the information available

from the OP.

I wrote the application with Wicket because, well, I really like Wicket. But I've tried to

minimize Wicket's "footprint" so that it doesn't distract you from learning how to write an

OpenID Relying Party.

****专科毕业设计（专业外文翻译）

The architecture of the sample application is divided into two areas of responsibility:

User interface written in Wicket

OpenID authentication — using the openid4java library

Of course the two areas intersect, but again, I have tried to keep overlap to a minimum

to make it easier to follow the OpenID instructions, rather than getting distracted by the

details of Wicket.

About openid4java and the sample application code

The OpenID Authentication spec is complicated. If you implement specifications all

the time, you'll probably be very comfortable writing your own implementation. As for me,

I'm lazy. I don't want to do any more work than I have to in order to solve the problem at

hand, which is where the openid4java library comes into play. openid4java is an

implementation of the OpenID Authentication specification that makes it much easier to use

OpenID programmatically.

The code listings that follow show the openid4java API calls an RP makes to use

OpenID. One thing you may notice is how little code the sample application actually needs

to make this happen. openid4java really does make your life easier.

To reduce the Wicket footprint in the sample application, I've isolated the code that

calls openid4java into its own Java class called RegistrationService (located in

com.makotogroup.sample.model). This class contains five methods that correspond to the

usage of the openid4java API:

getReturnToUrl() returns the URL that the browser will be directed to once

successful authentication has taken place.

getConsumerManager() is used to obtain an instance of the main openid4java API

class. This class handles all of the code the sample RP application needs to perform

authentication.

performDiscoveryOnUserSuppliedIdentifier() does what its name implies: it

handles any potential problems that arise during the discovery process.

createOpenIdAuthRequest() creates the AuthRequest construct that is required to do

the authentication.

剩余30页未读，继续阅读

Mmnnnbb123

粉丝: 752
资源: 8万+

"面向Java Web应用程序的OpenID认证协议翻译与应用"

"面向Java-Web应用程序的OpenID"专业外文翻译

"OpenID在Java Web应用程序中的应用与实践

"Java-Web应用程序OpenID认证技术研究及应用

外文文献翻译---面向java-web应用程序的openid本科学位论文.doc

外文翻译--面向Java-Web应用程序的OpenID.doc

外文翻译 面向Java Web应用程序的OpenID.doc

cl-openid-demo:Common Lisp Web 应用程序的 OpenID 登录演示

java-openid.zip

java-openid-master.zip_OpenID

express-3.x-openid-example:使用Passport的Express 3.x应用通过OpenID进行身份验证

最新资源

外文翻译面向Java Web应用程序的OpenID.doc