使用 openID 识别用户
由于我之前从未使用过 openID，所以我对此一无所知。
我想知道当有人想使用openID登录我的网站时我是否必须注册他的信息（如果用户不填写信息，是否有任何注册过程）。
除了 openID 之外，我是否应该提供替代的经典用户注册？
Since I have never used openID befor I have no idea about it.
I want to know when someone want to log into my website using openID do I have to register his information (is there any registration process efen if the user don't fill the information).
should I provide an alternative classical user registration beside openID.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
最好的 OpenID 登录体验无需用户注册。您接受他们的 OpenID，您和您的用户就都完成了。谈论降低加入您的网站的门槛。没有比这更容易的了！如果除了用户的 OpenID 声明标识符之外，您还必须收集有关用户的更多信息，这是用户注册的一般规则：保持最少，并且最好在用户实际请求需要该信息的服务之前不要询问其他信息您收集该特定数据。这有助于保持用户对您的网站的兴趣，并且不会赶走他/她。
如果您正在编写一个新网站，我强烈建议您不接受用户名/密码反模式。如果您正确执行 OpenID 登录（今天这可能意味着制作大而显眼的 Google 和 Yahoo 登录按钮，然后制作一个较小的 OpenID 按钮以显示文本框），那么用户就不会感到困惑。在 OpenID 之前，很多网站都有“使用 Yahoo! 登录”的选项。他们网站上的按钮和用户“明白了”。 OpenID 看起来就像那样，并且对用户来说很容易。
通过不提供用户名/密码样式的登录，您在某种程度上迫使用户（通过您的超级简单的 OpenID 登录）开始习惯不在您的站点上重复使用旧密码或发明新密码。作为网站管理员，我们必须培训网络用户停止向如此多的网站提供他们的私人密码。
The best OpenID login experience has no user registration. You accept their OpenID and you and your user are both done. Talk about lowering the barrier to joining your web site. It doesn't get much easier than that! If you must gather more information about a user besides just their OpenID claimed identifier, and this is a general rule with user registration: keep it minimal, and preferably don't ask for the additional information until the user actually requests a service that requires that you collect that particular data. This helps keep the user interested in your site and doesn't drive him/her away.
And if you're writing a new web site, I highly encourage you to not accept username/password anti-pattern. If you do your OpenID login right (today that probably means making big, prominent Google and Yahoo login buttons and then a smaller OpenID button that makes a text box appear) then users won't get confused. Before OpenID, lots of sites had "Login with Yahoo!" buttons on their sites and users "got it". OpenID can look just like that and be easy for the user.
By not offering a username/password style login, you somewhat force the user (with your ultra-easy OpenID login) to start getting used to not reusing an old or inventing a new password at your site. We as webmasters must train web users to stop giving their private passwords to so many web sites.
我们的解决方案是运行我们自己的 openID 提供商并且不告诉任何人。如果您选择在不使用 openID 的情况下登录，您将被重定向到高度锁定的 openID 提供商。这很棒，因为我们一开始只有 1 个站点，现在有 4 个站点，而且它们都可以共享帐户。我们的提供商不会让您在其他任何地方使用它（无法使用它在此处登录）。
Our solution was to run our own openID provider and not tell anyone. If you choose to sign in without openID you get redirected to a very locked down openID provider. This was great as we started with 1 site and now have 4 and they can all share accounts. Our provider will not let you use it anywhere else (can't login here with it).
固执己见的咆哮
我的观点几乎肯定会不受欢迎；但无论如何我都会这样做，“为了隐私”:)
OpenID 不是一个好主意；通常，在计算机安全中，使用一个帐户来处理所有事情被认为是不好的，就好像该帐户被盗用时，该人可以危及与其相关的所有服务。
OpenID 直接违反了这一点。
除此之外，它还会造成单点故障，如果协议显示有缺陷[删除了对 OAuth 缺陷的错误引用]，则意味着您在任何地方都容易受到影响。
现在不言而喻，OpenID 提供了便利；确实如此，但对于我来说，这样做的代价太大了。
就我个人而言，我有点沮丧地注意到 OpenID 是注册该网站的唯一方式；所以我建议你提供一种替代机制（如果是我，我根本不会实现 OpenID）。
摘要
是的。提供替代方案（恕我直言）。
Opinionated Rant
My opinion will almost certainly be unpopular; but I'm going to make it anyway, 'for the good of privacy' :)
OpenID is not a great idea; typically in computer security it is considered bad to have a single account for everything, as if that account is compromised the person can compromise all services attached to it.
OpenID violates this quite directly.
As well as this, it creates a single point of failure, and if the protocol is shown to have a flaw [removed incorrect reference to OAuth flaw] it means you are susceptible everywhere.
Now it goes without saying that OpenID provides convenience; and sure it does, but for mine, the cost of this is too great.
Personally, I was a bit frustrated to note that OpenID was the only way to sign up to this site; so I would suggest to you that you provide an alternative mechanism (and if it were me, I would not implement OpenID at all).
Summary
Yes. Provide alternatives (IMHO).
你可以像 stackoverflow 网站一样，在用户填写他的信息之前，新用户将是未知的，并且在你的网站中，如果他没有填写他的个人资料信息，你可以禁止用户发帖。
是的，您应该提供，因为用户可能没有 openID 注册或者他对 openID 技术一无所知。
you can do like stackoverflow website, new user will be unknown until the user fill his information, and in your website you can disallow the user from posting if he didn't complete his profile info.
yes you should provide because maybe the user don't have openID registration or he know nothing about openID tech.