Add XRI support to OpenID [#143125]

XRI is an important piece of the identity/privacy puzzle - allowing users to manage multiple identities and maintain control over privacy. See http://dev.inames.net/wiki/Why_XRI for more information.

William Tan has written a proof of concept patch (attached) to add XRI support to the OpenID module.
http://dready.org/blog/2007/05/05/openid-for-drupal/

This patch can be tested at http://dready.org/drupal/

Known issues:
1. There is no documentation (either code or user) yet - this needs to be written
2. There may be minor code style issues to be cleaned up
3. Drupal complains when editing users (e.g. for an admin adding a role) because to the disallowed '=' in i-names, and also the lack of an e-mail address. Forcing admins to change a users login name, and add a made-up e-mail address when adding a role is obviously not good!

Comment	File	Size	Author
	drupal-openid-02.patch	5.92 KB	owen barton

Comments

Comment #1

fen commented 11 May 2007 at 03:57

Another issue - that affects both OpenID as well as XRI-style iname identifiers, is the "ugly name" problem. Most people would rather not have their posts signed with something that looks like
http://john_doe.myopenid.com/ or
@drupal*service_provider*john_doe

Rather, one would like to associate a community-friendly "pet name" with their identifier, and though they log in with the OpenID/Iname, their posts, etc. are signed by their "pet name".

There are some additional features we'll want to add down the line, such as access to shared profile data mediated by Identity Rights Agreements, but this can be added after the basic universal identifier technology is in place.