Visitar URL original
Tagged 0.9.4 release. · SENATICS/openid4java@512b72d · GitHub
Skip to content

Commit 512b72d

Browse files
Johnny.BufuJohnny.Bufu
Johnny.Bufu
authored and
Johnny.Bufu
committed
Tagged 0.9.4 release.
1 parent 151518c commit 512b72d

301 files changed

Lines changed: 4022 additions & 8472 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎CHANGELOG‎

Lines changed: 12 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -2,43 +2,12 @@
22

33
========================================================================
44

5-
This document highlights the major changes in the OpenID4Java library.
6-
Please see the TODO file for outstanding items.
5+
This document highlights of the major changes in the OpenID4Java library.
6+
Please see the TODO for outstanding items.
77

88
For the detailed logs please see the commit comments at:
99
- http://code.google.com/p/openid4java
1010

11-
20090614:
12-
13-
A number of related specifications have been finalized since the previous
14-
official release in November 2007, and are supported by OpenID4Java:
15-
16-
* OpenID Authentication 2.0
17-
* Attribute Exchange 1.0
18-
* PAPE 1.0
19-
20-
* Java 1.5 binaries are now released; source still compilable with Java 1.4
21-
22-
Under the hood:
23-
24-
* internal XRDS parsing to ensure correct identity data is discovered
25-
* discovery code has been revised to be more robust
26-
* discovery HTTP requests are transparently cached for increased performance
27-
* a minimal set of library dependencies are packaged with the official release
28-
* alternative packages are released with optional / extra functionality
29-
* proxy XRI resolver delegating to the service provided by XRI.net
30-
* local XRI resolver updated to use the latest openXRI 1.2.0 library
31-
* JDBC implementations for nonces and associations stores
32-
33-
34-
20071113:
35-
- Renamed AuthSuccess.setSignExtension() to AuthSuccess.addSignExtension()
36-
to better reflect the operation performed.
37-
38-
20071025:
39-
- Documented Relying Party Discovery requirements;
40-
see INSTALL : Relying Party Discovery section
41-
4211
20070913:
4312
- Improved error reporting and message validation.
4413

@@ -96,18 +65,20 @@ Under the hood:
9665

9766

9867
========================================================================
99-
Copyright 2006-2008 Sxip Identity Corporation
68+
Copyright 2006-2007 Sxip Identity Corporation
10069

101-
Project home page and package distribution:
70+
Package distribution:
71+
=> http://code.sxip.com
72+
73+
Source code and defect management:
10274
=> http://code.google.com/p/openid4java
103-
=> http://code.google.com/p/openid4java/downloads/
104-
105-
For support, please visit the wiki and join the Google Groups!
106-
=> http://groups.google.com/group/openid4java/
107-
=> http://code.google.com/p/openid4java/w/
75+
76+
For support, please join the Google Groups!
77+
=> http://groups.google.com/group/openid4java
10878

10979
OpenID
110-
=> http://openid.net/
80+
=> http://openid.net
11181

11282
Released under the Apache License 2.0
11383
=> see LICENSE
84+

‎INSTALL‎

Lines changed: 35 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ For general information about the package please see the README document.
1212

1313
Requirements:
1414

15-
- Java 1.5 JVM (or higher)
15+
- Java 1.4 JVM (or higher)
1616

1717
- Ant (optional: needed for building the package and running the tests)
1818
- Maven2 (optional: alternative to Ant; see maven2/README.txt)
@@ -23,66 +23,38 @@ Installation:
2323

2424
1. Installing the package
2525

26-
=> To make the OpenID4Java library available to a (web) application
27-
the following JAR files need to be copied to the application's
28-
classpath:
29-
- openid4java-*.jar
30-
- library dependencies (see below)
31-
32-
=> Library dependencies:
33-
34-
lib/*jar : Required. Core OpenID4Java library dependencies.
35-
lib/optional/ : Optional. Libraries supporting alternative deployments.
36-
- spring-*.jar : JdbcServerAssociationStore
37-
- ehcache-1.2.4.jar : EhcacheNonceVerifier
38-
- log4j-1.2.8.jar
39-
40-
lib/extra/ : Extra/development libraries, not needed for deployments.
41-
(JUnit tests, Jetty servlet container, SVN/Ant utilities)
42-
43-
lib/xri/ : Optional. Local OpenXRI resolver dependencies.
44-
Included only in the "openid4java-xri" and
45-
"openid4java-full" packages. (A dependency-less
46-
proxy XRI resolver is included in the standard package)
47-
48-
lib/infocard/ : Optional. OpenID-Infocards/Higgins STS dependencies.
49-
Included only in the "openid4java-infocard" and
50-
"openid4java-full" packages.
26+
=> Endorsed libraries:
5127

28+
The JAR files under the lib/endorsed/ folder need to be copied under
29+
your environment's endorsed libraries folder. If you are running a
30+
webapplication under Apache Tomcat, this directory can be found at:
5231

53-
=> Relying Party Discovery:
32+
JAVA_HOME/lib/endorsed
33+
or
34+
CATALINA_HOME/common/endorsed
5435

55-
Relying Parties must publish their endpoints in order for the OpenID
56-
Providers to be able to verify authentication requests and prevent
57-
proxy attacks. The Yadis protocol and realm verification mechanisms
58-
are used for this purpose. See the section "Discovering OpenID
59-
Relying Parties" of the OpenID Authentication specification for
60-
details.
36+
For other application servers or environments, please consult their
37+
documentation for configuring endorsed libraries.
6138

62-
Example:
39+
=> To make the OpenID4Java library available to the web application
40+
the following need to be done:
6341

64-
<Service xmlns="xri://$xrd*($v*2.0)">
65-
<Type>http://specs.openid.net/auth/2.0/return_to</Type>
66-
<URI>http://consumer.example.com/return</URI>
67-
</Service>
68-
69-
The RP should publish the above <Service> element at their realm URL.
70-
All OpenID Authentication request sent by this RP should contain
71-
openid.return_to values matching the http://consumer.example.com/return
72-
realm.
73-
74-
OpenID Providers:
75-
76-
Validation of openid.return_to values against Relying Party Discovery
77-
endpoints is enabled by default. This feature can be disabled with
78-
ServerManager.setEnforceRpId(false).
42+
Copy lib/*.jar and java-openid-sxip-*.jar to your application's
43+
Java classpath, along with any additional requirements as described
44+
in the library dependencies section below.
7945

46+
=> Library dependencies:
8047

81-
=> Java 1.4 compatibility
48+
lib/xri/ : OpenXRI dependencies; needed for XRI support.
49+
lib/endorsed/ : Endorsed libraries; documented above.
50+
lib/infocard/ : Higgins STS dependency; needed for OpenID-Infocards STS.
51+
lib/optional/ : Optional libraries supporting alternative deployments.
52+
- spring.jar : JdbcServerAssociationStore
53+
- ehcache-1.2.4.jar : EhcacheNonceVerifier
54+
- log4j-1.2.8.jar
55+
lib/extra/ : Extra libraries, not needed for deployments
56+
(JUnit tests, Jetty servlet container, SVN Ant utilities)
8257

83-
The official OpenID4Java distribution is compiled with a Java 1.5
84-
compiler. The source, however, can be compiled with Java 1.4.
85-
See the "Building the package" section below.
8658

8759
2. OPTIONAL: Configuring logging
8860

@@ -122,6 +94,7 @@ Installation:
12294
can be found as separate downloads at the following URLs:
12395

12496
http://java.sun.com/javase/downloads/index_jdk5.jsp
97+
http://java.sun.com/j2se/1.4.2/download.html
12598

12699
=> Third party libraries
127100

@@ -141,7 +114,7 @@ Installation:
141114

142115
ant jar
143116

144-
- Builds official distributable archive
117+
- Builds distribution ZIP package
145118

146119
ant dist
147120

@@ -362,18 +335,19 @@ Thanks for running OpenID!
362335

363336

364337
========================================================================
365-
Copyright 2006-2008 Sxip Identity Corporation
338+
Copyright 2006-2007 Sxip Identity Corporation
339+
340+
Package distribution:
341+
=> http://code.sxip.com
366342

367-
Project home page and package distribution:
343+
Source code and defect management:
368344
=> http://code.google.com/p/openid4java
369-
=> http://code.google.com/p/openid4java/downloads/
370345

371-
For support, please visit the wiki and join the Google Groups!
372-
=> http://groups.google.com/group/openid4java/
373-
=> http://code.google.com/p/openid4java/w/
346+
For support, please join the Google Groups!
347+
=> http://groups.google.com/group/openid4java
374348

375349
OpenID
376-
=> http://openid.net/
350+
=> http://openid.net
377351

378352
Released under the Apache License 2.0
379353
=> see LICENSE

‎MAINTAINERS‎

Lines changed: 13 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -14,10 +14,13 @@
1414
Entire Library, including documentation:
1515

1616
M: Marius Scurtescu <marius@sxip.com>
17-
S: maintained
17+
S: supported
1818

1919
M: Johnny Bufu <johnny@sxip.com>
20-
S: maintained
20+
S: supported
21+
22+
M: David Huska <huska@sxip.com>
23+
S: supported
2124

2225
M: Sutra Zhou
2326
S: fixes/patches
@@ -29,18 +32,19 @@ Entire Library, including documentation:
2932
S: fixes/patches
3033

3134
========================================================================
32-
Copyright 2006-2008 Sxip Identity Corporation
35+
Copyright 2006-2007 Sxip Identity Corporation
36+
37+
Package distribution:
38+
=> http://code.sxip.com
3339

34-
Project home page and package distribution:
40+
Source code and defect management:
3541
=> http://code.google.com/p/openid4java
36-
=> http://code.google.com/p/openid4java/downloads/
3742

38-
For support, please visit the wiki and join the Google Groups!
39-
=> http://groups.google.com/group/openid4java/
40-
=> http://code.google.com/p/openid4java/w/
43+
For support, please join the Google Groups!
44+
=> http://groups.google.com/group/openid4java
4145

4246
OpenID
43-
=> http://openid.net/
47+
=> http://openid.net
4448

4549
Released under the Apache License 2.0
4650
=> see LICENSE

‎README‎

Lines changed: 15 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -9,10 +9,10 @@ licensed under Apache 2.0.
99

1010
The library currently supports the following OpenID specifications:
1111

12-
- OpenID Authentication 2.0
13-
- OpenID Attribute Exchange 1.0
12+
- OpenID Authentication 2.0 (draft 12)
13+
- OpenID Attribute Exchange 1.0, draft 7
1414
- OpenID Simple Registration 1.0 and 1.1
15-
- OpenID Provider Authentication Policy Extension 1.0
15+
- OpenID Provider Authentication Policy Extension 1.0, draft 1
1616
- OpenID Information Cards 1.0, draft 1
1717

1818
OpenID starts with the concept that anyone can identify themselves on the
@@ -28,15 +28,14 @@ other credentials) stays safely stored on your OpenID Provider (which you
2828
can run yourself, or use a third-party identity provider).
2929

3030
For more information about the OpenID protocol please refer to the
31-
specification at:
32-
http://openid.net/developers/specs/
31+
specification at: http://openid.net/specs.bml
3332

3433

3534
The Latest Version:
3635

37-
Details of the latest version can be found on the OpenID4Java library
38-
distribution project page at:
39-
http://code.google.com/p/openid4java/downloads/
36+
Details of the latest version can be found on the OpenID4Java library
37+
distribution project page at: http://code.sxip.com
38+
4039

4140
Package contents:
4241

@@ -56,8 +55,6 @@ VERSION : The released version of this package.
5655

5756
apidoc/ : JavaDoc API documentation.
5857

59-
samples/ : Sample implementation projects. See samples/README for details.
60-
6158
src/ : Source code.
6259

6360
test/ : Test cases source code and test data.
@@ -71,18 +68,19 @@ project.properties
7168
maven2/ : Maven2 build scripts; see maven2/README.txt.
7269

7370
========================================================================
74-
Copyright 2006-2008 Sxip Identity Corporation
71+
Copyright 2006-2007 Sxip Identity Corporation
72+
73+
Package distribution:
74+
=> http://code.sxip.com
7575

76-
Project home page and package distribution:
76+
Source code and defect management:
7777
=> http://code.google.com/p/openid4java
78-
=> http://code.google.com/p/openid4java/downloads/
7978

80-
For support, please visit the wiki and join the Google Groups!
81-
=> http://groups.google.com/group/openid4java/
82-
=> http://code.google.com/p/openid4java/w/
79+
For support, please join the Google Groups!
80+
=> http://groups.google.com/group/openid4java
8381

8482
OpenID
85-
=> http://openid.net/
83+
=> http://openid.net
8684

8785
Released under the Apache License 2.0
8886
=> see LICENSE

‎TODO‎

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,16 @@
1515

1616
=> Implementation
1717

18+
- Update based on finialized versions of the following:
19+
- OpenID Authentication 2.0
20+
- OpenID Attribute Exchange 1.0
21+
1822
- Extensions to implement:
1923
- OpenID Signed Assertions 1.0
2024

25+
- Normalization : review XRI parsing to mach the latest spec / XRI syntax 2.1
26+
(when when syntax 2.1 goes out)
27+
2128
- MessageExtension.providesIdentifier()
2229
- review interface to allow exchange of messages with no identifiers at all
2330
- review affected message validation logic
@@ -26,6 +33,12 @@
2633

2734
--> Nice to have, but not essential:
2835

36+
- Add a 'stop-using-timeout' to associations on the RP side, when they are
37+
about to expire (e.g. 5 min before expiration): improves user-experience
38+
(associations will not expire in the middle of a transaction).
39+
40+
- Don't normalize the url before redirects (not needed, extra cost)
41+
2942
- Auth* class hierarchy reorganization
3043

3144
- Factory method for incoming messages
@@ -40,7 +53,7 @@
4053

4154

4255
========================================================================
43-
Copyright 2006-2008 Sxip Identity Corporation
56+
Copyright 2006-2007 Sxip Identity Corporation
4457

4558
Package distribution:
4659
=> http://code.sxip.com

‎VERSION‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
#Fri Sep 28 11:12:39 PDT 2007
2+
Version=0.9.4.339

0 commit comments

Comments
 (0)