1. OpenID Tech Night #5

2. Identity Provider Identity ProviderIdentity ProvideridentityIdP IdentityIdentityOpenID 3. 4. zigorou.myopenid.com 5. 6. 7. 8. 9. User-Supplied Identifier OP Identifier Claimed Identifier 10. Discovery Association Authenticate Request AuthenticateResponse Verification 11. Discovery Association Authenticate Request AuthenticateResponse Verification 12. [zigorou ~] $ lwp-request -S -e -d http://zigorou.myopenid.com/ | grep XRDS X-XRDS-Location: http://zigorou.myopenid.com/?xrds=1 [zigorou ~] $ lwp-request http://zigorou.myopenid.com/?xrds=1 http://specs.openid.net/auth/2.0/signonhttp://openid.net/sreg/1.0http://openid.net/extensions/sreg/1.1http://schemas.openid.net/pape/policies/2007/06/phishing-resistanthttp://openid.net/srv/ax/1.0http://www.myopenid.com/serverhttp://zigorou.myopenid.com/ 13. Discovery Association Authenticate Request AuthenticateResponse Verification 14. #!/usr/bin/perlsub sig {my %pairs = @_; use strict;my $keyval = format_keyval(%pairs); use warnings;hmac_sha256_hex($keyval,$hmac_key); use Digest::SHA qw(hmac_sha256_hex); } use Perl6::Say;say sig( foo => quot;abcquot;, bar => quot;xyzquot; ); our $hmac_key = quot;common_secretquot;;89b7f51ec9b76e97d5a179f313af38e6cc8b5cb086 sub format_keyval {0e266caf6847ded05428ce my %pairs = @_; join quot;nquot; => map { $_ . ':' . $pairs{$_} } keys %pairs; } 15. Discovery Association Authenticate Request AuthenticateResponse Verification 16. Discovery Association Authenticate Request Authenticate Response Verification