跨站点身份验证和 Zend 框架
我被要求在 Zend Framework 中实现跨站点登录解决方案。
我考虑过也许使用 OpenID,还有其他解决方案可以使登录在多个站点上持续存在吗?
在某些方面,我们托管的封闭系统更适合。
I have been asked to implement a cross site login solution in Zend Framework.
I have thought about perhaps using OpenID, are there any other solutions to make a login persist across many sites?
In some ways a closed system hosted by us would suit better.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
我会选择 openid (参见 http://framework.zend.com /manual/en/zend.openid.provider.html),但您也可以使登录操作连接到公共数据库...
我认为只要 cookie,您就无法轻松地使用户跨不同域连接是特定领域的...
I would go with openid (see http://framework.zend.com/manual/en/zend.openid.provider.html) but you can also make the login action connect to common database...
I think you can't easily make user connected across different domains as long as the cookies are domain specific...
我认为 StackOverflow 实现的登录解决方案非常好。它提供多种身份验证服务。就我个人而言,我觉得提供 Google 和/或 Facebook 作为身份验证提供商将覆盖很大一部分用户。
正如 tomas.fejfar 提到的,由于浏览器安全性的原因,很难使用非 OAuth 解决方案。
I think the login solution implemented right here at StackOverflow is pretty sweet. It offers a variety of authentication services. Personally, I feel like providing Google and/or Facebook as the auth provider will cover a large percentage of users.
As tomas.fejfar mentioned, it would be tough to use a non-OAuth solution due to browser security.