Bugzilla:OpenID Auth Plugin: Difference between revisions

(→‎Open Issues: + note about LID)
Line 7: Line 7:
*  Where should the OpenID URI be stored?
*  Where should the OpenID URI be stored?
** Currently using profiles/extern_id.  Long term should probably be its own field, and longer than 64 bytes.
** Currently using profiles/extern_id.  Long term should probably be its own field, and longer than 64 bytes.
*  Should user log in using email or by OpenID
*  Should user log in using email or by OpenID?
** Currently still using email.  Might work on using in conjunction with [https://bugzilla.mozilla.org/show_bug.cgi?id=218917 Myk Melez's patch for arbitrary BZ names], but want to get something working first.
** Currently still using email.  Might work on using in conjunction with [https://bugzilla.mozilla.org/show_bug.cgi?id=218917 Myk Melez's patch for arbitrary BZ names], but want to get something working first.
*  Should email verification process still occur
*  Should email verification process still occur?
** There doesn't appear to be any way around it, as there's no way to query an OpenID server for an email address.  That may mean that [http://lid.netmesh.org/ LID] or FOAF is also needed to make this work in a viable way
** There doesn't appear to be any way around it, as there's no way to query an OpenID server for an email address.  That may mean that [http://lid.netmesh.org/ LID] or FOAF is also needed to make this work in a way that doesn't require an email verification ping-pong
*  Should a confirm hash style verification (ala Mailman or GForge) be created, as opposed to mailing a password to the user
**  I don't relish needing to add this, but I don't see a good way around this
*  How should createaccount.cgi modification be done?
**  It's tempting to restructure this code, creating a new Bugzilla->create_account($cgi) method, and moving the current code into


== Other Links ==
== Other Links ==
17

edits