brad's life - openid in movable type 3.2 [entries|archive|friends|userinfo]
Brad Fitzpatrick

[ website | bradfitz.com ]
[ userinfo | livejournal userinfo ]
[ archive | journal archive ]

openid in movable type 3.2 [Aug. 25th, 2005|11:53 am]
Previous Entry Add to Memories Tell a Friend Next Entry
[Tags|, ]

The just-released Movable Type 3.2 [download] includes both an OpenID server and consumer plugin. They're not enabled by default, but this is a good first step.

Props to Mark Paschal for doing all the OpenID <-> integration work.
LinkReply

Comments:
[User Picture]From: [info]matte
2005-08-25 07:06 pm (UTC)

(Link)

Very cool! I have been looking forward to playing with the OpenID support in Movable Type. Nows the time it looks like. ;)
[User Picture]From: [info]markpasc
2005-08-25 08:43 pm (UTC)

(Link)

Thanks! :)
[User Picture]From: [info]bsdguru
2005-08-25 10:16 pm (UTC)

MT 3.2

(Link)

Great stuff. I'm planning on replacing the broken TypeKey support in MT 3.2 with Open ID as soon as I have a chance.

In the meantime I've a release to Freshmeat which is pending approval.
[User Picture]From: [info]brad
2005-08-25 10:21 pm (UTC)

Re: MT 3.2

(Link)

How's TypeKey support broken?
[User Picture]From: [info]bsdguru
2005-08-26 08:08 am (UTC)

Re: MT 3.2

(Link)

I'ved posted this to my blog for other Movable Type users who experience the same issue. Basically someone forgot to add to the upgrade process the adding of the "Site JavaScript" template. See below how one fixes the problem.

UPDATE: Site Javascript Fix

Under templates, you will need to create a template called "Site JavaScript" and enter mt-site.js as the output file and save. Click on templates again and click the checkbox to the left of the "Site JavaScript" template and select "Refresh Template(s)" from the dropdown box which currently says "More Actions..." and click on go. Click on the "Site JavaScript" link and click "Save and Rebuild". TypeKey commenting works again after doing this.

I think the above quirk should be added to the "Known Issues" list of Movable Type for users upgrading their version of Movable Type.
[User Picture]From: [info]haran
2005-08-26 05:31 am (UTC)

stupid openid question

(Link)

Probably a stupid question but havn't seen it answered anywhere.
Say, you use openid on messageboard Foo by giving your id as brad.livejournal.com and tell livejournal's openid server to always trust this site.
Whats to stop me from going to Foo and giving my openid as "brad.livejournal.com"?
Won't I be able to leave a comment as 'Brad'?
Or is this not the type of problem OpenID is supposed to solve?
Seems to me that it depends on others not knowing what your id is but thats easily guessable, isn't it?

[User Picture]From: [info]brad
2005-08-26 06:57 am (UTC)

Re: stupid openid question

(Link)

Because LiveJournal won't tell Foo that attacker is brad.livejournal.com. Because I, brad.livejournal.com, chose a trustworthy identity server (LiveJournal, in my case) that verifies that I'm me first.