<!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>openid</title> <meta name="viewport" content="width=device-width, initial-scale=1" /> <link rel="stylesheet" href="../style.css" type="text/css" /> <link rel="stylesheet" href="../local.css" type="text/css" /> </head> <body> <div class="page"> <div class="pageheader"> <div class="header"> <span> <span class="parentlinks"> <a href="../index.html">ikiwiki</a>/ <a href="../plugins.html">plugins</a>/ </span> <span class="title"> openid </span> </span> </div> </div> <div id="pagebody"> <div id="content" role="main"> <p><span class="infobox"> Plugin: openid<br /> Author: <span class="createlink">Joey</span><br /> Included in ikiwiki: yes<br /> Enabled by default: yes<br /> Included in <a href="./goodstuff.html">goodstuff</a>: no<br /> Currently enabled: no<br /> </span></p> <p>This plugin allows users to use their <a href="http://openid.net/">OpenID</a> to log into the wiki.</p> <p>The plugin needs the <a href="http://search.cpan.org/search?mode=dist&query=Net%3A%3AOpenID%3A%3AConsumer">Net::OpenID::Consumer</a> perl module. Version 1.x is needed in order for OpenID v2 to work.</p> <p>The <a href="http://search.cpan.org/search?mode=dist&query=LWPx%3A%3AParanoidAgent">LWPx::ParanoidAgent</a> Perl module is strongly recommended. The <a href="http://search.cpan.org/search?mode=dist&query=LWP">LWP</a> module can also be used, but is susceptible to server-side request forgery.</p> <p>The <a href="http://search.cpan.org/search?mode=dist&query=Crypt%3A%3ASSLeay">Crypt::SSLeay</a> Perl module is needed to support users entering "https" OpenID urls.</p> <p>This plugin is enabled by default, but can be turned off if you want to only use some other form of authentication, such as <a href="./passwordauth.html">passwordauth</a>.</p> <h2>options</h2> <p>These options do not normally need to be set, but can be useful in certain setups.</p> <ul> <li><p><code>openid_realm</code> can be used to control the scope of the openid request. It defaults to the <code>cgiurl</code> (or <code>openid_cgiurl</code> if set); only allowing ikiwiki's <a href="../cgi.html">CGI</a> to authenticate. If you have multiple ikiwiki instances, or other things using openid on the same site, you may choose to put them all in the same realm to improve the user's openid experience. It is an url pattern, so can be set to eg "http://*.example.com/"</p></li> <li><p><code>openid_cgiurl</code> can be used to cause a different than usual <code>cgiurl</code> to be used when doing openid authentication. The <code>openid_cgiurl</code> must point to an ikiwiki <a href="../cgi.html">CGI</a>, and it will need to match the <code>openid_realm</code> to work.</p></li> </ul> <h2>troubleshooting</h2> <p>See <a href="./openid/troubleshooting.html">troubleshooting</a> for a number of issues that may need to be addressed when setting up ikiwiki to accept OpenID logins reliably.</p> <h2>delegation</h2> <p>This plugin does not take care of doing the "server" part of the OpenID protocol, only the "client" part. In other words, it allows users to login to your site through OpenID, but is not in itself an OpenID provider.</p> <p>It is possible, however, to use your Ikiwiki site as a delegation point to another OpenID provider. For this, use the <a href="../ikiwiki/directive/meta.html">meta</a> directive with the <code>openid</code> parameter.</p> </div> </div> <div id="footer" class="pagefooter" role="contentinfo"> <div id="pageinfo"> <div class="tags"> Tags: <a href="./type/core.html" rel="tag">plugins/type/core</a> <a href="./type/auth.html" rel="tag">type/auth</a> </div> <div id="backlinks"> Links: <a href="./emailauth.html">emailauth</a> <a href="../news/ikiwiki_version_2.0.html">news/ikiwiki version 2.0</a> <a href="./openid/troubleshooting.html">openid/troubleshooting</a> <a href="./passwordauth.html">passwordauth</a> <a href="../roadmap.html">roadmap</a> <a href="../security.html">security</a> <a href="../tips/using_a_proxy.html">tips/using a proxy</a> <a href="./write.html">write</a> </div> <div class="pagedate"> Last edited <span class="date">Tue Feb 26 23:01:54 2019</span> <!-- Created <span class="date">Tue Feb 26 23:01:54 2019</span> --> </div> </div> <!-- from ikiwiki --> </div> </div> </body> </html>