开发者

Can I use OpenID without server - locally?

I want to write a JS app that will authenticate the users using openid. It will do all it's work and then pass effects to some parent webapp. The problem here is that I don't want to use any kind of server - just a local JS sending messages redirecting and开发者_JAVA百科 stuff. I know it's weird but application I am writing is very specific and requires it. So questions are: - is it at all possible? - are there any ready solutions? If it's not possible, can you tell me at what point it would fail according to you? I have read OpenID spec and I cannot find such a point.


Yes, it should be perfectly possible.

  • JS gets token from OpenID provider
  • token is saved somewhere (e.g. cookie or HTML5 local storage)
  • JS redirects to OpenID login
  • JS handles callback

There's nothing here stopping you from doing it, except that it's somewhat unorthodox and offers absolutely no security, like any purely client-side login system.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜