是否有集成 OpenID 和 OAuth 的标准库？
我只是集思广益，对这些技术还不太了解。我想要做的是为用户提供一种简单而安全的方式来证明他们在多个网站上的身份，并且我想为网站提供一种相互共享某些信息的方法（如果用户给予他们许可）。经过一番阅读后，似乎 OpenID 和 OAuth 是解决这个问题的最佳方法（对吗？）。
经过搜索，我发现了两个有趣的项目。一个是“Step2”，它只有 Java 库（对我来说不是问题，但其他合作伙伴网站可能不是用 Java 编码的），看起来它已经被放弃了。另一个是“OpenID Connect”，它看起来甚至还没有启动。
所以，我想我有三个问题。我应该链接 OpenID 和 OAuth 吗？是否有一个获得大量支持的 OpenID+OAuth 项目？如果没有的话，我自己将两者整合起来是否容易？
I'm just brainstorming, and don't really know much about these technologies yet. What I want to do is provide an easy and secure for users to prove who they are across multiple web sites, and I want to provide a way for web sites to share certain information with each other (if the user gives them permission). After a little reading, it seems like OpenID and OAuth would be the best way to solve this problem (right?).
After searching, I've found two interesting projects. One is "Step2" which only has Java libraries (not a problem for me, but other, partner websites might not be coded in Java), and looks like it has been abandoned. Another is "OpenID Connect," which doesn't look like it's even been started.
So, I've guess I've got three questions. Is linking OpenID and OAuth what I should be doing? Is there a OpenID+OAuth project that has a lot of support? If not, would it be easy to integrate the two myself?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
OpenID 在像 Stack Overflow 这样的情况下很有趣，在这种情况下，您想让人们使用外部凭据登录，但不希望与该外部站点交换数据。
但我认为您不需要针对所描述的场景使用 OpenID...通过让用户通过 OAuth 流程，用户可以有效地“在多个网站上证明自己的身份”，作为授权过程的一部分。
OpenID is interesting in cases like Stack Overflow where you want to let people log in with external credentials but not with the intent of exchanging data with that external site.
But I don't think you need OpenID for the scenario described... by putting users through the OAuth flow, users are effectively "proving who they are across multiple web sites" as part of the authorization process.
描述 OpenID 和 OAuth、OAuth 的工作原理以及 OAuth 的作用。
DotNetOpenAuth 是一个开源库，支持 OpenID、OAuth 和
支持您的网站访问者使用其 OpenID 登录。
文档介绍了 OAuth 授权流程以及如何使用 OAuth 令牌。
还概述了如何使用 OAuth 为我们的 Web 应用程序实施 Google。
Describe OpenID and OAuth, how works OAuth and what does OAuth.
DotNetOpenAuth is an open source library that supports OpenID, OAuth and
support for your site visitors to login with their OpenIDs.
Document describes OAuth authorization process as well as how to work with OAuth tokens.
Also gives an overview that How to implement Google using OAuth for our web application's.