OpenID on SourceForge.net

Posted on Wednesday, April 30th, 2008 by lukecrouch
Category: General

I’m happy to announce we’re launching support for OpenID!

OpenID is getting tremendous traction and we’re happy to be jumping into it. it’s bringing us back in touch with fresh web (2.0) technology. as a decentralized open-source standard, it’s a perfect fit for us - it allows us to streamline more user interaction and participation with our site, and hopefully more for the whole OSS community.

we’ve spent the past couple weeks on it - integrating the Zend Framework OpenID component into our site code. we like the framework as a whole and I personally hope to use more of it in the future. we’ve been happy to participate, as a company, in the ZF project and have already submitted reports of, and patches for, some OpenID issues and enhancements.

while I’m giving shout-outs, I have to thanks the SF staff who worked on it - especially Paul Huff, Patrick Mee, John Hoffmann, Adam Voigt, Kathi Hutchings, and Wes Moran for tolerating my squawking while they did the productive work over the last few weeks. and Lisa and Ross have really helped me get out of my shell to tell the community about it.

we’re really hoping OpenID is good for our users, and we’re eager to have everyone try it out and give us feedback - both good and bad - here in our community forums, or out in the blogosphere, or wherever. so, go log in with your OpenID already! and learn more about our implementation on our OpenID site doc page.



Reader Comments

[...] shipped support for OpenID this morning followed by an official announcement on their community forums. In just a few seconds I had my OpenID tied to my existing SF [...]

[...] even used some of their infrastructure in the past.  Today they’ve made it even easier to login to SourceForge with OpenID.  SourgeForge.net isn’t acting as an OpenID Provider but rather is accepting OpenID logins; [...]

mgatki on April 30th, 2008

This is excellent news. It’s nice to have one more place where I can use my OpenID identifier to log in.

However, the signup form still seems to require a local password for OpenID users. This is confusing and in a way defeats the object of using OpenID. While it’s nice that I can just make up a lengthy, completely unmemorable password and not have to worry about it, it’s still irritating that I have to come up with a password at all.

lukecrouch on May 1st, 2008

mgatki, excellent point. we tried to explain our needs for doing so in the site doc page - http://alexandria.wiki.sourceforge.net/OpenID#tocOpenID6

because we create ssh and scm accounts for all users, we still need valid username and password credentials for those kinds of off-web services. we know this isn’t the ideal for our website-only users, but for now it was the best way for us to start our OpenID implementation.

[...] ahora soporta OpenID Muy buena sorpresa la de hoy, al ver que SourceForge ha agregado soporte de OpenID en su sitio, pero la forma en la que lo han hecho me pareció muy [...]

rturk on May 2nd, 2008

mgatki/lukecrouch:

It seems to me the only option is to provide a separate interface for managing ssh and scm passwords that’s a little more decoupled from the login and account creation process. Is that more confusing, or less? :)

Ross

danap_n_mt on May 3rd, 2008

The implemtation that Sourceforge as taken for OpenID seems fair enough,
dual login. I do not wish to have only an OpenID access means for
Sourceforge. If I’m forced to use only OpenID I will take my projects
elsewhere. I do not understand how people think having the same key
for every door that you wish to have locked and private is a good
thing. On top of that having the key managed by someone besides
yourself.

[...] even used some of their infrastructure in the past.  Today they’ve made it even easier to login to SourceForge with OpenID.  SourgeForge.net isn’t acting as an OpenID Provider but rather is accepting OpenID logins; this [...]

lukecrouch on May 4th, 2008

rturk:

you’re right - we’d have to decouple the site and non-site auth mechanisms. we considered it at the outset, but it will take not-insignificant amount of work to do it. I think it’s at the top of our list for improvements/enhancements to our OpenID feature.

[...] deal, if it’s just blog comments. What happens when there’s more at stake? Consider the SourceForge is using OpenID. Looking at their FAQ, I don’t see the question of whether code commits will be allowed using [...]

[...] SourceForge Community blog announced OpenID support, following Google, IBM, Microsoft, Verisign and Yahoo! decision to join OpenID Foundation board. [...]

[...] с помощта на OpenID. Официалното съобщение от SF team е тук. SourceForge.net не е OpenID Доставчик, а единствено позволява [...]

[...] SourceForge 的时候就发现了,SourceForge 已经支持 OpenID 了。一周前看见SourceForge 官方也已经表示,用户可以直接通过 OpenID 登录 [...]

zeeb90au on May 17th, 2008

Now that users can access sf.net via openID, how about allowing users to access project web sites via OpenID? I tried openId enabling my drupal based project site but the openID login does not work. I think a firewall setting would need to be slightly relaxed to allow the php code to access the remote openid server.

lukecrouch on May 19th, 2008

zeeb,

I think we’ve had problems with people abusing outbound connectivity from the project web hosts in the past, so it may take a while before we can adequately accommodate that.
(http://alexandria.wiki.sourceforge.net/Project+Web,+Shell,+VHOST+and+Database+Services#tocProject%20Web,%20Shell,%20VHOST%20and%20Database%20Services8)

-L

zeeb90au on May 20th, 2008

How about if you implemented being an OpenID host or perhaps just some kind of relay, could project web sites be given connectivity to that?

gavinbaumanis on May 30th, 2008

I noticed in the OpenId FAQ when login in that you do not yet support I-names. Ialso note that you have submitted a bug report for this.

Is there any news on when this might be corrected?

-Gavin

[...] official - SourceForge.net has joined the OpenID bandwagon. SourceForge, the world’s largest open source software [...]

lukecrouch on June 3rd, 2008

Gavin,

the Zend_Service_Yadis proposal (http://framework.zend.com/wiki/pages/viewpage.action?pageId=20369) is currently under consideration by the Zend Framework team, and as soon as it’s approved for laboratory or incubator, we will work to get it into our implementation.

but we’re un-sure about specifically when this will happen. :(

-L

salimma on July 6th, 2008

Would it be possible to link one’s existing SF account with one (or more) OpenIDs? Also, the next logical step is to make an SF account to be an OpenID to be used on other sites as well.

I’m a package maintainer for the Fedora project, and it will be useful if I have bug reports and fixes I make on behalf of Fedora to be assigned to my Fedora OpenID, but I can still see an aggregated report from my main SF account.

lukecrouch on July 10th, 2008

salimma,

it is possible to link existing accounts with multiple OpenIDs using the new OpenID management page in the account options. (http://sourceforge.net/account/openid.php)

while we’ve considered offering OpenID Provider services, for now at least, we think our more valuable service is to provide a delegation URL for our OpenID users. once you have linked an OpenID to your sf.net account, you can use the above-mentioned OpenID management page to make any of your linked OpenIDs your delegate. this allows you to provide sf.net/users/ to other OpenID relying parties.

hope that helps.

[...] read more | digg story [...]

[...] popular Web sites and companies were quick to embrace OpenID, including SourceForge, Yahoo!, and LiveJournal. when it first came on the scene. Now, the interest in the project seems [...]

beewoolie on February 21st, 2009

OpenID on SourceForge would be really useful if it didn’t require a Yahoo account…or perhaps I’m misreading this page:

http://apps.sourceforge.net/trac/sitedocs/wiki/Yahoo OpenID support

I’m using myOpenID and for some reason, I’m unable to login to SourceForge with it.

lukecrouch on February 23rd, 2009

It doesn’t require Yahoo. You should be able to sign in with any OpenID provider, though some smaller ones might have bugs.

Look at http://apps.sourceforge.net/trac/sitedocs/wiki/OpenID%20feature%20coverage

We tested extensively with myOpenID though. If it’s not working, you should submit a support request for it.

-L



Both comments and pings are currently closed.

Search Community


November 2009

November 2009
M T W T F S S
 1
2345678
9101112131415
16171819202122
23242526272829
30EC
All events for November
 

Most Active Forum Posters

  1. silverfang (553)
  2. hinojosa (356)
  3. moorman (325)
  4. creek23 (153)
  5. leeschlesinger (132)
  6. trilarion (126)
  7. caglow (109)
  8. rturk (79)
  9. javajox (71)
  10. bricelambson (68)