Here's a new iteration of my code to provide OpenID consumer support for Arc applications: http://catdancer.ws/arc/openid1.tar All code and patches are released to the public domain. This release implements the last step of the OpenID verification process: coming back to the web site from the OpenID server, doing something with the verified OpenID such as saving the login in a cookie, and then redirecting the browser to a friendly URL on the web site. srv in arc1 has regular ops which display an HTML page, raw ops which allow headers (such as setting a cookie) to be added when an HTML page is displayed, and redirect ops which redirect the browser to a new location. To get the right user experience I needed to set a cookie and redirect; rather than introduce yet another permutation (a "raw redirect" op), instead I introduced a "superraw" op (for lack of a better name) which is responsible for generating all of the headers of its response. With this addition the design of srv.arc is getting a bit cluttered with special case op handling, but my goal for today was to get some working code. Still to be done is miscellaneous code cleanup and passing the current page URL from the request to the JanRain library so that it can do its spoof checking. |