authorization server authenticates the user.4. The authorization server obtains the user consent/authorization.5, the authorized server to the end user to send back an authorization code to the client.6. The client uses the authorization code to request a response from the token endpoint.7, the client receives a token with an ID and access token response body.8, the client verifies the ID token and retrieves the end user's subject identifier.3.1.2 Authorization Endpoint (Authorization Endpoint)
Note: This is the old text written on February 26, November. It has not been sent in csdn. Please resend it.
I heard that there is a topic about openid at this year's annual online computing conference. The issue of website identity authentication is not a new topic. It has started since the launch of the popular passport in ms. Even openid came out for a while.
authorization code is published to the authenticated client.
Verify that the authorization code is valid.
If possible, the authentication authorization code is not used before.
Make sure that the Redirect_uri parameter value is the same as the Redirect_uri parameter value of the original authorization request. If the Redirect_uri parameter value is a nonexistent Redirect_uri registered value, the authorization server may return an error (
IdentityServer4 use OpenID Connect to add user authentication. How does openidconnect work?
Use IdentityServer4 to implement OpenID Connect server and add user authentication. Client call to implement authorization.
IdentityServer4 has been updated to version 1.0 and is described in previous articles. IdentityServer4 A
process can be tedious. but using the same password at each of your favorite websites poses a security risk. with openid, you can use a single, existing account (from providers like Google, Yahoo, AOL or your own blog) to sign in to thousands of websites without ever needing to create another username and password. openid is the safer and easier method to joining new sites. Gain greater control over your o
a public account in the middle (excluding the Web), the public account developer can use this interface to obtain the basic information of the current user (including nickname, gender, city, and country ). Using user information, you can achieve user experience optimization, user source statistics, account binding, user identity authentication, and other functions.Note: "The interface for obtaining basic user information is used to obtain basic user
ArticleDirectory
Who owns or controls openid?
Why openid?
It's a single username and password that allows you to log in to any openid-enabled site.
It works on thousands of websites.
It's an open standard.
What is openid?
"
Openid allows you to use an
blog, We need to register as a user of the blog system. As an end user, we had to set up accounts on each website and manage numerous accounts. With openid technology, you do not need to manage these independent accounts, but manage your unique identity through the authentication server.A common application scenario of openid: a user attempts to log on to an ext
Introduction to OpenID background knowledge
Traditional identity authentication is to store user information in a separate system, possibly a directory server, database, local file system or a custom system. When authenticating, the user provides the user name and the password, checks with the user information system, confirms the user is legitimate. And OpenID
Example of a Applet -- Obtain the unique openid and openid of the Applet
1. Effect display
2. Key code
1) WXML File
Obtain the unique openid of a user.Openid: {openid} session_key: {session_key }}
2) JS files
Const APP_ID = ''; // enter the applet appidconst APP_SECRET = ''; // input the applet app_secretvar OPEN
Using OpenID authentication in a Java Web application
OpenID is a set of decentralized authentication systems. With OpenID I can prove that I have a URL like Http://openid.jstevenperry.com/steve, and I can log in to any OpenID-li
The website is connected to the oauth function (automatically follows the public account). after logging on, I will get the openid of the login user and save it. I need to use openid to send a targeted message to the user. if the test fails to be debugged in the middle of the night, I find that the openid obtained through oauth and directly call the APi... the we
Obtain the user's OpenID through MVC development, and obtain the user's openid through mvc
The first development version of the web page, the most important to obtain the OpenId, is hereby recorded
1. First, you must have appid and appsecret.
1 1. public class WeiXin { 2 3 public static string appid { 4 get { 5 string _a
MVC web page authorization to obtain the user's OpenId, mvc to obtain the openid
I recently developed a public platform and made a record. I have also developed it before. I forgot about this development. After half a day, I 'd better take a note.
Note that the framework is used to develop a public platform for MVC. The scenario is to obtain the user's openid on
After paying attention to the public account, there will be a unique openid, and the output on the page will always exist. But why does the output display return_codefailreturn_msgJSAPI must be passed to the openid when you submit an order and click pay? I am in a hurry to help you .. There will be a unique openid after paying attention to the public account, and
The implementation method for the applet to obtain the user's openId, the applet openid
How to obtain the user's openId using a Applet
Front end:
Wx. login ({success: function (res) {res. code })
After obtaining the code, upload it to the background,
Then request the interface
Https://api.weixin.qq.com/sns/jscode2session? Appid = APPID secret = SECRET js_
Website access to the scan code login (oauth) function (automatically follow the public number), login I will get to login user OpenID, save it.
I need to use OpenID to send a directed message to the user to test the midnight unsuccessful
After debugging, it is found that the OpenID obtained by OAuth and the direct call API get attention to the user list of
Write an OpenID provider for single sign-on authentication
Introduction: In this article, you will learn how to use OpenID to secure Java Web application resources to prevent damage by unauthenticated users. In the 2nd part of the series that describes the OpenID authentication
$. Post (index. php? Actq open, {qnumber: qNumber}, functi $. post ('index. php? Act = q openid =
', {'Qnumber': qnumber}, function (data) {}, 'json'); is index. php the current page? Or the page that submits the JSON data?
Reply to discussion (solution)
Index. php should be the current pageBut for beginners, it is better not to use the current pageBecause ajax needs to process the returned data, especially the jsonIn this case, if the php p
The example of this article for everyone to share the micro-trust public platform to achieve access to the user OpenID method for your reference, the specific contents are as follows
Index.aspx.cs Code:
Public partial class Index:System.Web.UI.Page {//user ID public string OpenID = "";
The public number information section is publicly string AppID = configurationmanager.appsettings["AppID"];
publ
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.