Metadata-Version: 1.0
Name: plone.openid
Version: 1.1
Summary: OpenID authentication support for PAS
Home-page: http://svn.plone.org/svn/plone/plone.openid
Author: Wichert Akkerman - Plone Foundation
Author-email: plone-developers@lists.sourceforge.net
License: GPL
Download-URL: http://dist.plone.org
Description: OpenID PAS support
        ==================
        
        Introduction
        ------------
        This product implements OpenID_ authentication support for Zope_ via a
        Pluggable Authentication Service plugin.
        
        Using this package everyone with an OpenID authentity will be able to
        login on your Zope site. OpenID accounts are not given any extra roles
        beyond the standard Authenticated role. This allows you to make a distinction
        between people that have explicitly signed up to your site and people
        who are unknown but have succesfully verified their identity.
        
        .. _Zope: http://www.zope.org/
        .. _OpenID: http://www.openidenabled.com/
        
        Installing plone.openid
        -----------------------
        
        This package is made to be used as a normal python package within Zope 2. This
        is only supported in Zope 2.10 or later. If you are using Zope 2.8 or Zope 2.9
        you can install the `pythonproducts package`_ to add python package support to
        your Zope.
        
        .. _pythonproducts package: http://dev.serverzen.com/site/projects/pythonproducts
        
        After installing this product in your python path it needs to be registered
        in your Zope instance. This can be done by putting a
        plone.openid-configure.zcml file in the etc/pakage-includes directory with
        this content::
        
        <include package="plone.openid" />
        
        This plugin needs an active plone.session plugin to manage the login
        sessions for authenticated users.
        
        If you are using buildout_ you can also do this by adding a zcml statement
        to the instance section of your buildout::
        
        [instance]
        zcml = plone.openid
        
        
        .. _buildout: http://pypi.python.org/pypi/zc.buildout
        
        
        Authentication flow
        -------------------
        The OpenID authentication flow goes like this:
        
        - user submits a OpenID identity (which is a URL) to you site. This is
        done through a HTTP POST using a form variable called ``__ac_identity_url``
        - the PAS plugin sees this variable during credential extraction and
        initiates a OpenID challenge. This results in a transaction commit and
        a redirect to an OpenID server.
        - the OpenID server takes care of authenticating the user and redirect the
        user back to the Zope site.
        - the OpenID PAS plugin extracts the information passed in via the OpenID
        server redirect and uses that in its authentication code to complete the
        OpenID authentication
        
        Session management
        ------------------
        
        The PAS plugin only takes care of authenticating users. In almost all
        environments it will be needed to also setup a session so users stay
        logged in when they visit another page. This can be done via a special
        session management PAS plugin, for example `plone.session`_.
        
        .. _plone.session: http://pypi.python.org/pypi/plone.session
        
        Changelog
        =========
        
        
        Version 1.1 - April 21, 2008
        ----------------------------
        
        * Writing test and fixes for bug #7176 whereby a traceback
        was produced when an empty string identity was placed in the openid
        login form.
        [andrewb]
        
        * Do not enable OpenID support if python has no SSL support.
        [wichert]
        
        
        Version 1.0.1 - November 9, 2007
        --------------------------------
        
        * Also accept https URLs as valid identifiers. This fixes
        http://dev.plone.org/plone/ticket/7298
        [wichert]
        
        
        Version 1.0 - August 15, 2007
        -----------------------------
        
        * First stable release
        [wichert]
        
        
Keywords: PAS openid authentication
Platform: UNKNOWN
Classifier: Framework :: Plone
Classifier: Framework :: Zope2
Classifier: License :: OSI Approved :: GNU General Public License (GPL)
Classifier: Programming Language :: Python
Classifier: Topic :: Software Development :: Libraries :: Python Modules
Classifier: Topic :: System :: Systems Administration :: Authentication/Directory
