canonical-isd-hackers team mailing list archive

[William Grant <me@xxxxxxxxxxxxxxxxxx>]

On Fri, 2010-09-24 at 20:02 -0400, Curtis Hovey wrote:
> On Sat, 2010-09-25 at 09:19 +1200, Michael Hudson wrote:
> > > > I use
> > > > https://launchpad.net/~statik/ to login via openID to various 3rd
> > > > party sites such as stackoverflow.com. Is this going to stop
> > working
> > > > ?(I won't complain if it does, just trying to understand)
> > > 
> > > That's the XRDS coming into play. If you look at the HTML, you'll
> > see
> > > elements delegating the page's identity to login.launchpad.net.
> > 
> > This should point to login.ubuntu.com now really, I guess.  Oh, except
> > it seems that login.ubuntu.com doesn't accept requests from unknown
> > RPs? 
> 
> I do not think Lp accepted unknown RPs versions 1-3 of SSO hosted by Lp
> required us to maintain a table or recognised RPs. I know the table was
> in the version that ISD took, and assume something like it is in place
> in Ubuntu SSO.

That table allows authorised RPs to receive additional data (email
addresses and teams, for example). login.launchpad.net still permits any
RP to retrieve the identity URL.

William.

Attachment: signature.asc
Description: This is a digitally signed message part