发送认证到OP 1. //创建消费者对象,它将向认证服务器发出认证请求 2. ConsumerManager manager = new ConsumerManager(); 3. //setAssociations方法设置与OP的关联存放的位置,可以把它存在内存或者数据库或者xml或者文件中,这里将它存放在内存 4. manager.setAssociations(new InMemoryConsumerAssociationStore()); 5. //setNonceVerifier方法设置记录response_nonce的位置 6. manager.setNonceVerifier(new InMemoryNonceVerifier(5000)); 7. //下载OpenID提供者列表(一般只有一个提供者) 8. List discoveries = manager.discover("https://example.com/login/openid/user/"); 9. //通过关联获取和OpenID提供者之间的共享密钥 10. DiscoveryInformation discovered = manager.associate(discoveries); 11. //将关联(发现信息)保存,以备之后的使用 12. session.setAttribute("openid-disc", discovered); 13. 14. //要重定向的地址 15. String returnURL = "http://example.com/openidresponse.jsp"; 16. //将用户重定向到他们的OpenID提供者页面,并告诉OpenID提供者外部站点的地址 17. AuthRequest authReq = manager.authenticate(discovered, returnURL); 18. //在重定向之前添加额外的请求参数(email,fullname) 19. FetchRequest fetch = FetchRequest.createFetchRequest(); 20. fetch.addAttribute("email", "http://schema.openid.net/contact/email", true); 21. fetch.addAttribute("fullname", "http://openid.net/schema/namePerson/friendly", true); 22. authReq.addExtension(fetch); 23. //重定向到OP认证 24. response.sendRedirect(authReq.getDestinationUrl(true)); 接收来自OpenID提供者认证信息 1. //获取响应参数列表 2. ParameterList response = new ParameterList(request.getParameterMap()); 3. DiscoveryInformation discovered = (DiscoveryInformation) session.getAttribute("openid-disc "); 4. StringBuffer receivingURL = request.getRequestURL(); 5. String queryString = request.getQueryString(); 6. if (queryString != null && queryString.length() > 0) 7. receivingURL.append("?").append(request.getQueryString()); 8. //根据参数列表,关联句柄以及url_query验证是否通过认证 9. VerificationResult verification = manager.verify(receivingURL.toString(), response, discovered); 10. Identifier verified = verification.getVerifiedId(); 11. if (verified != null) { 12. if (authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) { 13. FetchResponse fetchResp = (FetchResponse) authSuccess.getExtension(AxMessage.OPENID_NS_AX); 14. List emails = fetchResp.getAttributeValues("email"); 15. email = (String) emails.get(0); 16. List fullNames = fetchResp.getAttributeValues("fullname"); 17. fullName = (String) fullNames.get(0); 18. // success.. 19. } 20. } 21. else 22. // OpenID authentication failed