OpenID使用哪個URL？

我看到通過與谷歌OpenID使用哪個URL？

LightOpenID Object 
(
    [returnUrl] =&gt; http://ikeyless/account/login/ 
    [required] =&gt; Array 
     (
     ) 

    [optional] =&gt; Array 
     (
     ) 

    [verify_perr] =&gt; 
    [capath] =&gt; 
    [identity:LightOpenID:private] =&gt; 
    [claimed_id:LightOpenID:private] =&gt; https://www.google.com/accounts/o8/id?id=[RANDOM_STRING] 
    [server:protected] =&gt; https://www.google.com/accounts/o8/ud 
    [version:protected] =&gt; 2 
    [trustRoot:protected] =&gt; http://ikeyless 
    [aliases:protected] =&gt; 
    [identifier_select:protected] =&gt; 
    [ax:protected] =&gt; 1 
    [sreg:protected] =&gt; 
    [data:protected] =&gt; Array 
     (
      [openid_identifier] =&gt; https://www.google.com/accounts/o8/id 
      [cmd] =&gt; account 
      [act] =&gt; login 
      [openid_ns] =&gt; http://specs.openid.net/auth/2.0 
      [openid_mode] =&gt; id_res 
      [openid_op_endpoint] =&gt; https://www.google.com/accounts/o8/ud 
      [openid_response_nonce] =&gt; 2010-11-16T16:49:30ZREDpfCsz7bwPsg 
      [openid_return_to] =&gt; http://ikeyless/account/login/ 
      [openid_assoc_handle] =&gt; [RANDOM_STRING] 
      [openid_signed] =&gt; op_endpoint,claimed_id,identity,return_to,response_nonce,assoc_handle 
      [openid_sig] =&gt; [RANDOM_STRING] 
      [openid_identity] =&gt; https://www.google.com/accounts/o8/id?id=[RANDOM_STRING] 
      [openid_claimed_id] =&gt; https://www.google.com/accounts/o8/id?id=[RANDOM_STRING] 
     )

哪，我應該在本地存儲和比較驗證一個OpenID用戶時驗證返回了多個網址嗎？

來源

2010-11-16 Webnet

這一個：https://www.google.com/accounts/o8/id?id=[RANDOM_STRING]

來源

2010-11-16 20:10:52 mike

有兩個按鍵的映射到網址：'openid_identity'和'openid_claimed_id'。「openid_identity」指向的URL總是與「openid_claimed_id」指向的URL相同嗎？ – KajMagnus 2011-09-04 00:51:34

如果我理解[文檔]（http://openid.net/specs/openid-authentication-2_0.html#identifying），則使用'openid_claimed_id'鍵。從文檔：*成功的認證響應聲明的標識符應該被依賴方用作本地存儲用戶信息的關鍵。* – KajMagnus 2011-09-04 01:21:59

而且，爲了回答我自己的問題：'openid_identity'實際上可能不同於'openid_claimed_id'。 'openid_identity'是一些* OP-本地標識符：一個終端用戶的替代標識符，對於一個特定的OP而言是本地的，因此不一定在最終用戶的控制下。*，[OpenID 2.0規範]（http：// openid.net/specs/openid-authentication-2_0.html）。 – KajMagnus 2011-09-04 01:30:26

OpenID使用哪個URL？

回答

相關問題