OpenID integration

[MaxWaldorf]

Hi everyone,

As I am no developper, I was wondering if typolight could support OpenID login ?

Maybe someone is already working on that...
Keep me posted !


Cheers !

[FloB]

I think I saw an extension in the repository for integrating OpenID. If it's not compatible with the current TL branch, just contact the developer of that extension.

[MaxWaldorf]

Well I saw that either but integration is not native and a lot of hack are needed...

Maybe should it be sent as an evolution request to typolight core...


Cheers :D

[FloB]

I just saw that the OpenID extension didn't make it to the extension repository and thus development had been abandoned. Maybe you can contact Andreas Schempp that he continues development of this extension?

I attached the latest version I got.

[samjetski]

Hey,

I submitted a feature request on dev.typolight.org for OpenID consumer functionality on the frontend (eg: for "members") and it was accepted

http://dev.typolight.org/issues/show/1375

Cheers,
SamJ

[MaxWaldorf]

Good news !

:D

[pbrooks]

Hi all,
I've started to work on a full solution for other authentication methods into Contao, I've commented on the bug report and getting some discussion together here for the method I am taking towards implementation.

Adding other authentication methods requires changes to the core files of Contao to remove dependence on the username field from post data & when looking up the user (Ie redirect to a page for a group when a user logs in).

The intention is to bring modifications into ModuleLogin too, so that you can select from a single module which types of authentication you wish to support.
I have already developed additions to the DCA to this end, as can be seen here:

Uploaded with ImageShack.us


The modification will add a new abstract Authentication class that AuthenticationUsername, AuthenticationOpenID, AuthenticationFacebook can extend from.

Extra configuration will be added via $GLOBALS['TL_CONFIG']['AuthenticationClasses'] or I might search for those files matching Authentication%.class.

Thus it will be possible for developers to add extra Authentication classes without any further core modification.

Each Authentication class must return a 'username' parameter to fit in with other classes calling User->username.

Existing hooks regarding user authentication typically use username,password as arguments. This is one area I need to investigate to ensure nothing gets broken for third party packages. Ideally we'd just pass the username as previously described and false as password.

I've begun the development and should have a diff file for the Contao team to inspect soon.

[pbrooks]

A quick progress update.
So far I've got the logic within the User class to work with the new Authentication schemes and got to the stage of two functions:
generateLink()
generateFields()
which display content depending if a certain authentication class is picked.
It looks like this at the moment:


Next items to be completed:
* Finish form integration (Make "remember me" selectable by Authentication class)
* Add weights to Authentication selection (ie so Facebook could appear above others)
* Add logos for Username/Email login.
* OUATH custom authentication logic.

[FloB]

This looks awesome! Looking forward to it

[pbrooks]

This looks awesome! Looking forward to it

Heh, Cheers for the positive feedback.

Facebook Connect was very simple to add to Contao, however with all these Single Sign-In Authentication methods I will need to add a redirect to let the user set registration options for the first time.

For OpenID I'm using php-openid as suggested in the original ticket, it's more work due to having to implement a Database mechanism for storing OpenID data that the library accepts. Currently php-openid relies on MDB2, ideally I'd prefer to use the inbuilt Contao Database libraries.

[Ben_360fusion]

Just been reading this post. This module looks great and will add some amazing options to contao websites for developers.

Good work!

Ben

[pbrooks]

Dear all,
I have now attached a second version of the authentication changes to the original OpenID ticket, this supports:
AuthenticationUsername
AuthenticationEmail
AuthenticationFacebook

At the moment AuthenticationOpenID requires some more work to get enough information out about a user, I will upload my progress so far as soon as I can. I would very much welcome anyone elses assistance in getting some more details out of OpenID providers, my current stumbling block is that I'm only getting OpenID URL out of MyOpenID with one library. When other libraries (big nasty things) have been able to get some more personal details.

Please note that the code available on the ticket requires Core Modifications, it is not recommended that you run it on a production server as it's not been checked by the Contao team yet and introduces new code to the Contao core.
The code provided is not a module and requires patching of TL_ROOT.

New options in the DCA include Site Root Facebook parameters:


We set Facebook parameters in the root since it's a reference that all pages, modules etc have a reference to.


And selection of Authentication types via the Login module:

[FloB]

Just took a quick look into the diff file – most of your proposed changes can be accomplished without touching any core file. Please use an extra extension (i. e. the one you already created) to extend or overwrite the DCA, language definitions and overwrite FE modules. You can have a look onto other extensions (and the documentation) on how they do this. If you don't figure it out, please ask so we can help you find the solution (but try it first, otherwise you won't learn anything).

[pbrooks]

Just took a quick look into the diff file – most of your proposed changes can be accomplished without touching any core file. Please use an extra extension (i. e. the one you already created) to extend or overwrite the DCA, language definitions and overwrite FE modules. You can have a look onto other extensions (and the documentation) on how they do this. If you don't figure it out, please ask so we can help you find the solution (but try it first, otherwise you won't learn anything).

Hi FloB,
Thanks for the speedy response, anything DCA wise, language definitions I am aware (and commonly implement) that they can be provided via an extension.
Modifying User,ModuleLogin & ModuleRegister via overriding classes though would however involve copying entire methods to just add a few lines of code.
My worry is that this approach isn't very future-proof, each of the modified classes would need to be checked against core changes between releases.

[FloB]

As they change not very often, you should be on the safe side. Otherwise you can provide specialised modules that implement the legacy modules.

[pbrooks]

I've updated the ticket with a new version of Alpha code, this is no longer a diff but rather a module over-riding and adding content. (http://dev.contao.org/attachments/899/c ... pha007.zip)
The only problem is libraries/User.php , the zip will replace User.php with some additional code (rated to 2.9.3). Any thoughts on this?

[Ruud]

Is there any progress on the ticket? Leo did not respond to it. I'm currently building an extension to support the online part of an android app. It would be great to be able to use most forms of authentication as the next step is to build an iPhone and wm7 version of the app.

I have no reservations about changing the core for these kinds of things if development does not promise any nearby support, so I would be fine with using your modifications, but still....

[thyon]

I like.

What would be really kewl is to have BE facebook login -- with a forced password option (so people can't just launch your browser and start fiddling with the BE if they get to your computer).

[acocalypso]

Hi at all,

im very interested in this Login Method. Is it still in developmend?

i tried it out but i cant find a way to include a facebooklogin in my page.

greetz

Aco