Network.MiniHTTP.OpenID

This module contains support for the OpenID authentication standard. See http://www.openid.net for details of the protocol. At the moment, only the basic v2 authentication is supported. Also, we only support OpenID 2.0 HTML discovery, not Yadis nor XRI.

Only DH-SHA1 is used for the cryptography. This used to be SHA256, but Yahoo doesn't support it (boo!)

References in this module are to the OpenID v2 spec http://openid.net/specs/openid-authentication-2_0.html

Types

data OpenIDDiscovery

This is the result of Discovery: the OP local identity and the server HTTP endpoint.

Constructors

OpenIDDiscovery

Fields

discoveryProvider :: URL

discoveryLocalID :: Maybe String

Instances

Eq OpenIDDiscovery

Show OpenIDDiscovery

data CheckIDType

There are two types of checkid calls.

Constructors

CheckIDSetup

CheckIDImmediate

Instances

Eq CheckIDType

Show CheckIDType

data Handle

The type of an OpenID handle. Handles are used to identify sessions between the consumer and OP.

Instances

Eq Handle

Show Handle

data Key

The type of a key.

Instances

Eq Key

Show Key

Actions

findKey :: ByteString -> Handle -> STM (Maybe Key)

Lookup a key given the hostname of the OP and the handle. Generally used after an indirect request to check a signature from an OP.

discover :: URL -> IO OpenIDDiscovery

Use HTML discovery to find the OpenID information for a given URL

associate :: OpenIDDiscovery -> IO (Handle, Key)

Perform an association with a discovered OP and return either an error message or a handle, a key and the number of seconds from now when the handle will expire.

Internally this uses a cache so associate may not actually involve an HTTP request to the OP.

checkID

Arguments

:: CheckIDType

-> URL

claimed id

-> OpenIDDiscovery

OP-local id

-> Handle

assoc handle

-> ByteString

return to URL

-> Maybe ByteString

trust realm

-> URL

URL

Construct a checkid call

processCheckIDReply

Arguments

:: Map ByteString ByteString

the arguments

-> IO (Either String ByteString)