1 fusionforge-plugin-authopenid
2 -----------------------------
4 This is meant to be the external OpenID authentication plugin for FusionForge.
6 If the plugin is activated by a user in its account management page, then
7 he/she may login to FusionForge using OpenID (provided that the plugin is
8 activated on the whole site/forge, of course).
10 Any number of OpenID identities (URLs) can be used by a forg user to authenticate.
12 Only one user may use an OpenID identity simultaneously.
14 OpenID identities must have been added through the account management's OpenID tab,
15 and are associated to the user, provided he/she owns them (i.e. can successfully
16 log-in to these URLs).
18 The logged-in session is granted full privileges of the user, for now.
19 This should be improved in a later version, as OpenID may not be trusted for critical
20 operations on the forge.
22 The code depends on the lightopenid library (http://code.google.com/p/lightopenid/)
24 USE IT AT YOUR OWN RISKS : THIS IS JUST A VERY EARLY PLUGIN, AND NO SECURITY AUDIT WAS CONDUCTED !