<%@ page session="true" %> <%@ page import="java.util.Map,java.util.Iterator,org.openid4java.discovery.Identifier, org.openid4java.discovery.DiscoveryInformation, org.openid4java.message.sreg.SRegRequest, org.openid4java.message.sreg.SRegResponse, org.openid4java.message.ax.AxMessage, org.openid4java.message.*, org.openid4java.OpenIDException, java.util.List, java.io.IOException, javax.servlet.http.HttpSession, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, org.openid4java.consumer.ConsumerManager, org.openid4java.consumer.InMemoryConsumerAssociationStore, org.openid4java.consumer.InMemoryNonceVerifier" %> <% // README: // Set the returnToUrl string to the appropriate value for this JSP // Since you may be deployed behind apache, etc, the jsp has no real idea what the // absolute URI is to get back here. Object o = pageContext.getAttribute("consumermanager", PageContext.APPLICATION_SCOPE); if (o == null) { ConsumerManager newmgr=new ConsumerManager(); newmgr.setAssociations(new InMemoryConsumerAssociationStore()); newmgr.setNonceVerifier(new InMemoryNonceVerifier(5000)); pageContext.setAttribute("consumermanager", newmgr, PageContext.APPLICATION_SCOPE); } ConsumerManager manager=(ConsumerManager) pageContext.getAttribute("consumermanager", PageContext.APPLICATION_SCOPE); String openid=request.getParameter("openid"); try { // determine a return_to URL where your application will receive // the authentication responses from the OpenID provider // YOU SHOULD CHANGE THIS TO GO TO THE String returnToUrl = "http://localhost:8080/simple-openid/consumer_returnurl.jsp"; // perform discovery on the user-supplied identifier List discoveries = manager.discover(openid); // attempt to associate with an OpenID provider // and retrieve one service endpoint for authentication DiscoveryInformation discovered = manager.associate(discoveries); // store the discovery information in the user's session session.setAttribute("openid-disco", discovered); // obtain a AuthRequest message to be sent to the OpenID provider AuthRequest authReq = manager.authenticate(discovered, returnToUrl); // Attribute Exchange example: fetching the 'email' attribute SRegRequest req = SRegRequest.createFetchRequest(); req.addAttribute("email",true); authReq.addExtension(req); if (! discovered.isVersion2() ) { // Option 1: GET HTTP-redirect to the OpenID Provider endpoint // The only method supported in OpenID 1.x // redirect-URL usually limited ~2048 bytes response.sendRedirect(authReq.getDestinationUrl(true)); } else { // Option 2: HTML FORM Redirection // Allows payloads > 2048 bytes //

// see samples/formredirection.jsp for a JSP example //authReq.getOPEndpoint(); // build a HTML FORM with the message parameters //authReq.getParameterMap(); %> <% Map pm=authReq.getParameterMap(); Iterator keyit=pm.keySet().iterator(); Object key; Object value; while (keyit.hasNext()) { key=keyit.next(); value=pm.get(key); %> <% } %> Continue...

<% } } catch (OpenIDException e) { // present error to the user response.sendError(500); } %>