Comments on: OpenID with Catalyst and more

By: Robin Smidsrød

Robin Smidsrød — Thu, 13 Aug 2009 08:20:46 +0000

This is remarkably similar to my blog post on the same subject.

http://blog.robin.smidsrod.no/index.php/2008/05/30/catalyst_how_to_authenticate_against_ope

By: Zbigniew Lukasiak

Zbigniew Lukasiak — Wed, 29 Jul 2009 07:43:23 +0000

Hi,

In the latest version of LWPx::ParanoidAgent (1.06) the problem with using LWP::Debug was fixed. Unfortunately it seems that there still is something wrong with it’s tests: http://matrix.cpantesters.org/?dist=LWPx-ParanoidAgent+1.06 . But even if someone force installs it – then Catalyst::Authentication::Credential::OpenID still fails it’s tests with the latest Catalyst versions. This is something it’s author is working on – but the problem seems tricky.

Anyway – nice walk through. I plan to pack it into SimpleLogin some day (but I just cannot mobilize myself to do that when you cannot install the prerequisites anyway).

By: Ovid

Ovid — Wed, 29 Jul 2009 06:07:53 +0000

Ironic you should refer to marketing as a waste of time in this post about OpenID. At the BBC, we have one project which switched from Perl to Java due to lack of robust OpenID support in Perl — and some people at the BBC still want to eliminate even more Perl because “it’s dying”.

You can go ahead and mock those who want to approach the perception problem differently from how you would, but it’s not a nice thing to do.

By: fREW Schmidt

fREW Schmidt — Wed, 29 Jul 2009 03:03:12 +0000

@Phillip: Anyone can create an OpenID provider, and that includes spammers. This will make it a bit harder for them to abuse that ability. Really this should have some kind of blacklist for OpenID providers, or maybe there should be an Akismet kind of thing for OpenID. I don’t know. This seems to work though

By: Phillip Smith

Phillip Smith — Wed, 29 Jul 2009 02:49:47 +0000

Great post.

Quick question:

“The one thing I should probably mention from the above is the captcha_check bit. I use ReCaptcha to ensure that my users are humans (for now I will discriminate against the machines!)”

Why is the CAPTCHA required if the authentication is being handled by OpenID?

Phillip.