Which OpenID consumer library?

brunnock has asked for the wisdom of the Perl Monks concerning the following question:

I'd like to allow users to login to my apps with OpenID.

It appears that the most popular solution is a module called Net::OpenID::Consumer, however it appears that this module supports OpenID 1.1 and has not been upgraded to support OpenID 2.0.

There's a newer library called OpenID4Perl, but it's not on CPAN. You have to download it with subversion. Anyways, it appears that this library hasn't been updated since 2006.

So, should I use Net::OpenID::Consumer, OpenID4Perl, or roll my own?

Comment on Which OpenID consumer library?

Replies are listed 'Best First'.
Re: Which OpenID consumer library? by jettero (Monsignor) on Aug 10, 2008 at 16:04 UTC
I don't think you're going to get a good answer. I've been an avid fan of openid since I learned about it and have been continually disappointed by the CPAN modules for it. I mean to write something myself some day, but lack the time -- besides, the good namespace is taken and the author does not respond in any way. I do have Net::OpenID::Consumer working, but Net::OpenID::Server is a lost cause. Particularly if you want some of the modern features of the OpenID 1.x standard. I sent the author patches for sreg, but he is a blackhole. UPDATE: It would seem some people can get ahold of him... I was unable to do so trying many times, using several email accounts over the course of two years. Clearly ymmv. -Paul	[reply]
Re: Which OpenID consumer library? by Your Mother (Archbishop) on Aug 10, 2008 at 17:42 UTC
I used the Net::OpenID::Consumer and Net::OpenID::Server modules in production at my last gig and in tests for recent applications -- a dummy server to test consumer stuff -- and they have worked well. I have written to, and received an immediate response from, Brad Fitzpatrick, regarding a problem I was having (which turned out to be operator error and not a problem with the code). It's been 10 months since I looked at the differences between the 1.1 and 2.0 specs but I'm sure if something doesn't work for you and you can work out how to fix/add it you could submit a patch. I recommend against the JanRain stuff on the CPAN. It doesn't pass any of its tests and while they have a nice community (a friendly and helpful mailing list and good site docs) I had to spelunk some of their PHP and it was lacking in error checking which made a couple of problems I had much harder than they needed to be.	[reply]