How does OpenID authentication work?

问题:

I am a little curious to know about how OpenID authentication works.

Is there any difference between OpenID authentication and the authentication which sites use exclusively for themselves?

回答1:

What is OpenID?

OpenID is an open, decentralized, free framework for user-centric digital identity. OpenID takes advantage of already existing internet technology (URI, HTTP, SSL, Diffie-Hellman) and realizes that people are already creating identities for themselves whether it be at their blog, photostream, profile page, etc. With OpenID you can easily transform one of these existing URIs into an account which can be used at sites which support OpenID logins.

OpenID

Difference between OpenID and conventional authentification form?

The difference is that the identification will be decentralized to an external site (for example Wordpress, Yahoo, ...). The website will know whether or not the identification is OK and let you login. Conventional website authentication performs a comparison with data held in a private database, so your username and password can be used to login to this website only. With OpenID you can use the same credentials on multiple websites.

How it works?

• You can see the Flow of operation here (image)
• Step-by-step activities here
• Step-by-step activities here (other blog)

Steps

1. User connects to OpenID enabled website.
2. User enters credential information.
3. A POST is made with a BASE64 (website to provider)
4. An answer is built (that contains expiration)
5. The website redirects the user to the provider to login.
6. User enters password and submit.
7. Verification is done.
8. Login!

回答2:

Here's a pretty good blog post with an extremely basic diagram.

回答3:

I stumbled across this great OpenID introduction which is neither too high-level nor too low-level.

http://wiki.openid.net/w/page/12995171/Introduction

It's a bit verbose, and more or less written as prose, but it's a fun read and very informative about what happens behind the scenes.

(Answer pasted from my answer at OpenID login workflow?.)

回答4:

Here is great explanation of OpenID concept. It has explained each and every steps to implement OpenID.

Another one called [Jan Rain] (http://janrain.com/openid-enabled/)

Another great step-by-step tutorial by Remy Sharp for OpenID