将我的 Web 服务的身份验证外包给 OpenID 或 OAuth
我有一个 Windows 桌面应用程序,用于收集和存储有关用户媒体库的元数据。它在概念上与 trakt 和 follw.it 类似,但数据存储在用户计算机本地的嵌入式数据库 (SQLite) 中。
我想添加功能,让用户将元数据上传到在线服务器。这将使我添加新功能,例如在网络和社交网络方面显示其内容。
因此,我正在考虑创建一个网络服务,供用户上传和下载媒体数据。我想知道是否可以使用 OpenID 或 OAuth,以便我可以外包身份验证部分。这就是我的想法:
- 桌面应用程序要求用户通过 OpenID 或 OAuth 提供商进行身份验证;用户 Anthony 选择使用他的 Twitter 帐户,使用他的登录名 RepWeiner。
- 现在,安东尼已被验证为 Twitter 上的 RepWeiner,从桌面应用程序上传到服务器的数据将被识别为“Twitter 上的 RepWeiner”拥有。
- 后来,安东尼的硬盘崩溃了,失去了里面的一切。他再次安装桌面应用程序,以便从服务器下载数据。他再次使用他的 Twitter 帐户登录。
- 桌面应用程序从服务器下载属于“RepWeiner on Twitter”的所有数据。
我想它的要点是,我希望用户在网络服务上识别自己的身份,但我也想避免让他们创建另一个登录名(并且我想避免必须处理身份验证)。这个想法有可能实现吗?
I have a Windows desktop application that gathers and stores metadata about a user's media library. It's similar in concept to trakt and follw.it, but the data is stored locally on the user's computer in an embedded database (SQLite).
I'd like to add functionality to let users upload their metadata to a server online. This will let me add new features such as displaying their content on the web and social networking aspects.
So I'm thinking of creating a web service for users to upload and download their media data. I'm wondering though if it's possible to use OpenID or OAuth so that I can outsource the authentication part. This is what I'm thinking:
- Desktop app asks the user to authenticate with an OpenID or OAuth provider; user Anthony chooses to use his Twitter account, using his login name RepWeiner.
- Now that Anthony has been verified to be RepWeiner on Twitter, the data uploaded from the desktop app to the server will be identified to be owned by "RepWeiner on Twitter".
- Later, Anthony's hard drive crashes, losing everything in it. He installs the desktop app again in order to download his data from the server. Again, he logs in using his Twitter account.
- The desktop app downloads all the data belonging to "RepWeiner on Twitter" from the server.
I guess the gist of it is, I want users to identify themselves on the web service, but I also want to avoid making them create yet another login (and I want to avoid having to handle the authentication). Is this idea possible in any way?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论