Can I use OpenID without server - locally?
I want to write a JS app that will authenticate the users using openid. It will do all it's work and then pass effects to some parent webapp. The problem here is that I don't want to use any kind of server - just a local JS sending messages redirecting and开发者_JAVA百科 stuff. I know it's weird but application I am writing is very specific and requires it. So questions are: - is it at all possible? - are there any ready solutions? If it's not possible, can you tell me at what point it would fail according to you? I have read OpenID spec and I cannot find such a point.
Yes, it should be perfectly possible.
- JS gets token from OpenID provider
- token is saved somewhere (e.g. cookie or HTML5 local storage)
- JS redirects to OpenID login
- JS handles callback
There's nothing here stopping you from doing it, except that it's somewhat unorthodox and offers absolutely no security, like any purely client-side login system.
精彩评论