No, they&#39;re not an OpenId provider. They use their own OpenID-like system called Facebook connect, which you can use to authenticate users on your site, among other features.

You can check it out here: https://developers.facebook.com/docs/facebook-login

There is an unofficial Facebook OpenID Provider available at:

http://facebook-openid.appspot.com/

You can eaisly use it to log in any OpenID site with Facebook accounts.

Facebook is not an OpenID provider, they do however [allow OpenID login using Google accounts][1].

OpenID provides a list of the most [popular providers][2].


  [1]: https://developers.facebook.com/blog/post/2009/05/18/facebook-supports-openid-for-automatic-login/
  [2]: http://openid.net/get-an-openid/

OpenID is a decentralized authentication protocol. It allows users to be authenticated by co-operating sites using a third party service, eliminating the need for webmasters to provide their own login systems, and allowing users to log into multiple unrelated websites without having to have a separate identity and password for each.

Users create accounts by selecting an **OpenID identity provider**, and then use those accounts to sign onto any website which accepts OpenID authentication. [Here](https://openid.net/developers/certified/) is a list of OpenID providers.

Facebook neither use OpenID nor OAuth as instead of just offering credentials, Facebook wanted to offer friend access and dynamics to the privacy of the information that simply wasn’t possible with the other standards. With Facebook Connect, what we see are elements of both OpenID and OAuth. **Facebook Connect** can verify that you are who you say you are, and it can then provide access to your data once you’ve given it permission to do so.


Say I have a Django class something like this:

    class Person(models.Model):
        name = models.CharField(max_length=50)
        # ...

How can I programatically obtain the `max_length` value for the `name` field?


How can I programmatically obtain the max_length of a Django model field?

I need to exit from a running interval if the conditions are correct:

    var refreshId = setInterval(function() {
            var properID = CheckReload();
            if (properID &gt; 0) {
                &lt;--- exit from the loop---&gt;
            }
        }, 10000);

How to exit from setInterval

Is Facebook an OpenID provider? I know they are an OpenID supporter but do they allow people to authenticate with other sites via OpenID with their Facebook credentials?

Is Facebook an OpenID provider?

<p>Is Facebook an OpenID provider? I know they are an OpenID supporter but do they allow people to authenticate with other sites via OpenID with their Facebook credentials?</p>


If I want to store the username and password to be used inside an Android application, what is the best way to do it? Is it through the preferences screen (but what if the user misses this?), or pop up a dialog box and ask the user for the credentials? If so, I do have to maintain state for the application. How would I do this?

Android: Storing username and password?

I have been reading about OAuth and it keeps talking about endpoints. What is exactly an endpoint?

What is an Endpoint?

Did a new install of postgres 8.4 on mint ubuntu.  How do I create a user for postgres and login using psql?  

When I type psql, it just tells me

    psql: FATAL: Ident authentication failed for user &quot;my-ubuntu-username&quot;

How do I login and authenticate to Postgresql after a fresh install?

I&#39;m wondering what the current approach is regarding user authentication for a web application making use of JSF 2.0 (and if any components do exist) and Java EE 6 core mechanisms (login/check permissions/logouts) with user information hold in a JPA entity. The Oracle Java EE tutorial is a bit sparse on this (only handles servlets).

This is **without** making use of a whole other framework, like Spring-Security (acegi), or Seam, but trying to stick hopefully with the new Java EE 6 platform (web profile) if possible.

Performing user authentication in Java EE / JSF using j_security_check

Can someone tell me the difference between an `AuthenticationManager` and an `AuthenticationProvider` in Spring Security?

How are they used and how are they called. It is my understanding that a `SecurityFilter` will call the `AuthenticationManager` to authenticate an `Authentication` object? But then where does the `AuthenticationProvider` come into play?

Thanks!

spring security AuthenticationManager vs AuthenticationProvider?

I can&#39;t seem to find the definitive word out there of the facebook search api: the api that allows you to search public status updates and comments/posts (there is a web interface for all logged in users for this at the moment). 

Does facebook have a public search API yet?

&lt;!-- language-all: lang-cs --&gt;

I am using http://www.codeproject.com/KB/IP/Facebook_API.aspx

I am trying to call the [XAML][1] which is created using [WPF][2]. But it gives me an error:

&gt; The calling thread must be STA, because many UI components require this.

I don&#39;t know what to do. I am trying to do this:

    FacebookApplication.FacebookFriendsList ffl = new FacebookFriendsList();

But it is giving me that error.

I added a background worker:

    static BackgroundWorker bw = new BackgroundWorker();

    static void Main(string[] args)
    {
        bw.DoWork += bw_DoWork;
        bw.RunWorkerAsync(&quot;Message to worker&quot;);
        Console.ReadLine();
    }

    static void bw_DoWork(object sender, DoWorkEventArgs e)
    {
        // This is called on the worker thread
        FacebookApplication.FacebookFriendsList ffl = new FacebookFriendsList();

        Console.WriteLine(e.Argument);        // Writes &quot;Message to worker&quot;

        // Perform time-consuming task...
    }

  [1]: http://en.wikipedia.org/wiki/Extensible_Application_Markup_Language
  [2]: http://en.wikipedia.org/wiki/Windows_Presentation_Foundation



The calling thread must be STA, because many UI components require this

&gt; **Possible Duplicate:**  
&gt; [How does Facebook Sharer select Images?](https://stackoverflow.com/questions/1138460/how-does-facebook-sharer-select-images)  

&lt;!-- End of automatically inserted text --&gt;

I am making a flash app that demonstrates potensial traffic injuries when driving at different speeds. I want the user to be able to share this information on facebook. However this demands that i can customize the text that will appear on facebook in some manner.

I am making an url that is opened in a blank window (from the flash app itself). I specify the u and t parameters, putting the generated message as the t parameter. But this seems to always be overridden by the pages title. If i omit the title tag from the html code, the file name is used (also overriding the specified title).
&lt;pre&gt;
http://www.facebook.com/sharer.php?u=http://espentokerud.com/face/addiste.html&amp;t=test;
&lt;/pre&gt;
I also tried url-encoding the url, but to no avail.
&lt;pre&gt;
http://www.facebook.com/sharer.php?u=http%3a%2f%2fespentokerud.com%2fface%2faddiste.html&amp;t=test;
&lt;/pre&gt;
I also tried using the addthis API, but experience the same shortcomings. The funny thing is that if i post a swf, the title and description can be customized, and it is also possible to specify a screenshot. But if i dont post a swf, this seems to be ignored.

I am aware that I can use meta tags on the html page to specify the thumbnail image, title and description, but some of this content has to be based on calculations inside the flash app. 




Want custom title / image / description in facebook share link from a flash app

I use ASP .NET and Facebook Connect APIs. but when I run the app and press Connect button it&#39;s return to the Website not to the test local server which is (http://localhost:xxxx/test.aspx)
So how I can test Facebook locally (i.e How I can change the callback url) ?

How to Test Facebook Connect Locally

I need to get via Facebook connect user&#39;s info and send a private message to all of his friends. Is it possible?

Send private messages to friends

I am creating a web app that will use OpenID logins and OAuth tokens with Youtube.  I am currently storing the OpenID identity and OAuth token/token secret in plain text in the database.

Is it inappropriate to store these values as plain text?  I could use a one-way encryption for the OpenID identifier but I don&#39;t know if that is necessary.  For the OAuth tokens, I would need to use a two-way encryption as my app relies on getting the session token for some uses.

Is it necessary to encrypt the OpenID identity?  Could someone use it to gain access to a user&#39;s account?

Securly Storing OpenID identifiers and OAuth tokens

**Please note**: this is an ancient question with ancient answers. Most of the linked apps are now unmaintained. These days, most people seem to use [django-allauth][1] or [python-social-auth][2]. I&#39;ll leave the original question intact below for posterity&#39;s sake.

---

There are at least half a dozen Django apps that provide OpenID authentication for Django:

 * [django-openid][3]
 * [django-openid-auth][4]
 * another [django-openid-auth][5], which seems to be dead
 * [django-authopenid][6]
 * [django-socialauth][7] (which also provides authentication with Twitter and Facebook accounts)
 * [django-socialregistration][8] (has Facebook and Twitter authentication, too)
 * [django-openid-consumer][9], a fork of Simon Willison&#39;s original django-openid. Seems more suited for simple blog comments than a full fledged registration workflow
 * [django-social-auth][10]

I played around with a couple of them. Simon Willison&#39;s [django-openid][11] made a good impression, but as he is at the forefront of trendsetting in Djangoland, I sometimes have difficulties wrapping my head around his trends (e.g. the whole dynamic urlpatterns system in django-openid). What&#39;s more, I couldn&#39;t get login to work with Google.

[django-authopenid][12] made a good impression, and it seems to have good integration with [django-registration][13]. [django-socialauth][14] and [django-socialregistration][15] have support for Twitter and Facebook, which is definitely a plus. Who knows if and when Facebook will start to be an OpenID provider...? socialauth seems to have [its share of problems][16], though.

So, what is the best OpenID app out there? Please share any positive (and negative) experience. Thanks!


  [1]: https://github.com/pennersr/django-allauth
  [2]: https://github.com/omab/python-social-auth
  [3]: http://github.com/simonw/django-openid
  [4]: https://launchpad.net/django-openid-auth
  [5]: http://code.google.com/p/django-openid-auth/
  [6]: http://bitbucket.org/benoitc/django-authopenid/wiki/Home
  [7]: http://github.com/uswaretech/Django-Socialauth
  [8]: http://github.com/flashingpumpkin/django-socialregistration
  [9]: http://code.google.com/p/django-openid-consumer/
  [10]: http://github.com/omab/django-social-auth
  [11]: http://github.com/simonw/django-openid
  [12]: http://bitbucket.org/benoitc/django-authopenid/wiki/Home
  [13]: http://bitbucket.org/ubernostrum/django-registration/wiki/Home
  [14]: http://github.com/uswaretech/Django-Socialauth
  [15]: http://github.com/flashingpumpkin/django-socialregistration
  [16]: http://www.elfsternberg.com/2009/11/24/django-socialauth-component-now-with-some-elfin-goodness/

What&#39;s the best solution for OpenID with Django?

Is it possible to use my personal website/blog to login to sites that use *openid*, and delegating to my Google account?

---

OK, I searched this question on SO but no good answer. After spent some time I figured out how to do it. I&#39;m going to answer this myself as a way to share it.

Delegate OpenID to Google (NOT Google Apps)

&gt; **Possible Duplicate:**  
&gt; [What&amp;#39;s the difference between OpenID and OAuth?](https://stackoverflow.com/questions/1087031/whats-the-difference-between-openid-and-oauth)  

&lt;!-- End of automatically inserted text --&gt;

What is really the difference between OpenID and oAuth? They look just the same to me. 

I should clarify, I&#39;m planning to use them in drupal, if that makes any difference. So I guess I&#39;m bound by whatever module implementations are available in drupal.

OpenID vs. OAuth

I have a product with a straightforward REST API so that users of the product can directly integrate with the product&#39;s features without using my web user interface.

Recently I have been getting interest from various third parties about integrating their desktop clients with the API to allow users of my product to access their data using that third party application.

I&#39;ve seen that applications that want to use Twitter authenticate using a login page hosted by Twitter that grants a specific application permission to access that user&#39;s data. You click the &quot;Allow&quot; or &quot;Deny&quot; button and the authentication process is complete. Facebook uses the same mechanism as best I can tell.

Upon further research, this seems to be OAuth in action, and seeing as my API is .Net-based, I am thinking I should use DotNetOpenAuth and provide a similar mechanism. Unfortunately the samples are sparsely documented (if at all) and the only tutorials I can find online seem to be focussed on helping you provide a login mechanism for your users so that they can log into your website using a third party provider.

What I would *really* like to do is have my REST API handle all of the core authentication and business logic for my web application and have, under the hood, my web application essentially be another application that just uses the API via OAuth. Users would authenticate on the website either directly using their username and password, or via a third party provider such as MyOpenID or Facebook and then the website would somehow use the returned token to authenticate against the REST API.

![Architectural Diagram][1]

It basically looks like I need my API to somehow host an OAuth service, but also have users use a third party OAuth service. I can&#39;t help but think I don&#39;t quite have enough of a grasp on OAuth to decide if I&#39;m overcomplicating things or if what I&#39;m trying to do is a good or bad way to do things.

Can someone give me at least a broad overview of the steps I need to undertake, or what I should look at to make this happen? Or point me at some tutorials? Or blast my proposal and tell me I&#39;m going about this (architecturally) all wrong?

  [1]: http://i.stack.imgur.com/neKuF.png

Content Type	Original Author	Original Content on Stackoverflow
Question	Jason	View Question on Stackoverflow
Solution 1 - Authentication	Adam Albrecht	View Answer on Stackoverflow
Solution 2 - Authentication	Petr Pridal	View Answer on Stackoverflow
Solution 3 - Authentication	Ben S	View Answer on Stackoverflow
Solution 4 - Authentication	aarushi arya	View Answer on Stackoverflow

Is Facebook an OpenID provider?

Authentication Problem Overview

Authentication Solutions

Solution 1 - Authentication

Solution 2 - Authentication

Solution 3 - Authentication

Solution 4 - Authentication

How to exit from setInterval

How can I programmatically obtain the max_length of a Django model field?

Attributions