[TYPO3-core] RFC #9474: Integrate OpenID authentication support to TYPO3

[Dmitry Dulepov]

Hi!

This is SVN patch request.

Type: feature

Branches: trunk

BT reference: http://bugs.typo3.org/view.php?id=9474

Problem: integrate OpenID authentication to TYPO3 (both BE and FE). OpenID provides a way to use a single login to different hosts in a secure way. User needs to register only once with the OpenID provider (such as Yahoo or LiveJournal) and he can login with this registration to any OpenID–enabled site.

Solution: the attached patch contains code that was developed during Hackontest. This code uses 3rd–party library, which comes with Apache license. According to Apache it is GPlv2 compatible, though FSF does not think so (Apache license better protects against patent issues than GPLv2). This license is also compatible with GPLv3. If anyone sees licensing as an issue, we can hold this feature until the issue is clarified. I am not an ultimate specialist in licensing issues but I think it is quite safe to use this library in our code. I also made sure that terms of licenses (such as clearly marking modified areas) are fulfilled.

Notes:
- you can read more about the feature and see demo videos here: http://forge.typo3.org/wiki/project-hackontest/Review
- I am really not sure if we can get this feature in as is. I think code quality is quite good and there is a manual. But I am not sure about license terms. Nevertheless I want to propose it as it is really convenient. I was not a big fun of OpenID but now I really like to use it :)
- I think "openid" extension key is owned by someone from the core team. So it should be safe to use it for the sysext
- you can also install the extension locally. I attach T3X to the bug report. It needs trunk. I cannot guarantee that it will work with older TYPO3 versions.

-- 
Dmitry Dulepov
TYPO3 Core team
My TYPO3 book: http://www.packtpub.com/typo3-extension-development/book
In the blog: http://typo3bloke.net/post-details/duplicate_content_with_realurl/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 9474.diff
Type: text/x-diff
Size: 554987 bytes
Desc: not available
Url : http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20081003/b70843fe/attachment-0001.diff