Re: PHP5 OpenID for PEAR

It's a similar situation to Services_Digg then ;). OpenID requires Diffie-Hellman and HMAC algos so I have both implemented in PHP5 for use with the openid lib. So yes, I probably can fill in a PHP5 version of the current Crypt packages. It may also include a Services_Yadis which is something OpenID 2.0 requires in order to be implemented. OpenID is odd that way - it's got a lot of protocols, algorithms and other stuff floating around which are useful outside OpenID so I organised them as separate components. I'll check it out later, but how is HTTP_Request 2 progressing? It could be useful here when it's ready so I can dump my own http client in its favour and reduce the duplication some more :). Regards, Pádraic Pádraic Brady http://blog.astrumfutura.com http://www.patternsforphp.com ----- Original Message ---- From: Helgi Þormar Þorbjörnsson <helgith@gmail.com> To: Pádraic Brady <padraic.brady@yahoo.com> Cc: Travis Swicegood <development@domain51.com>; pear-dev@lists.php.net Sent: Tuesday, June 19, 2007 7:10:27 PM Subject: Re: [PEAR-DEV] PHP5 OpenID for PEAR Hi On 6/19/07, Pádraic Brady <padraic.brady@yahoo.com> wrote: > > Ah, so its a chorus :) > > Okay, since JanRain have pulled out, I'll shove my way in. Sounds brutal > put that way... > > I'm continuing to refactor the code, so once the "Consumer" element is > done (few days at most) I'll post a link to a public repository here for > those here interested in seeing more. I'll then use that PEAR account > application form for the first time since starting PHP back in '01. I swear I've seen your name associated with some pear account :o At present, the code has several dependencies on the Zend Framework to be > resolved before a PEAR proposal is possible. Not too many, and nothing > complicated. I'll get a Phing task running to manage classname updates > between Zend and PEAR standards. > > If I might take this opportunity to pick the local brains... The current > class structure is very focused on PHP5 so there would be some duplication ( > i.e. not using PHP4 PEAR Crypt and Http classes). Is this acceptable? The > PHP4 classes are a bit outdated (no SHA256 HMAC for example which OpenID > 2.0 allows for). > > If I run into any issues I'll jab Travis for some advice :). Thanks for > offering - I'll try not to make you regret it. The only horribly complex > thing I found was getting Yadis implemented I think. That and managing 3 > BigInteger extensions and about 4 methods of hashing in HMAC/DH. Even Wez > has his hat in the ring with that openssl patch... Actually our policy is not to accept packages that have PHP 4 deps (i.e. we're embracing PHP 5, hehe) so no worries, if you see some "duplication" then go ahead and check if someone isn't interesting in porting X and Y package to PHP 5 and maintaining it, f.ex. when Services_Digg was proposed then it depended on HTTP_Request and as a result v2 is in progress which is PHP 5+ :-) Also cool if you'd help on say a PHP 5 crypt package ;-) Regards - Helgi ----- Original Message ---- > From: Travis Swicegood <development@domain51.com> > To: pear-dev@lists.php.net > Sent: Tuesday, June 19, 2007 3:15:55 PM > Subject: Re: [PEAR-DEV] PHP5 OpenID for PEAR > > Pádraic Brady wrote: > > This is mainly a slightly longer response to a comment by Greg to my > blog. > > > > As Greg noted, PEAR does not currently have a library supporting OpenID > authentication. I've been working on an OpenID library in PHP5 for something > proprietary but I retain the full rights to the code and I have been > intending on making it open source. > > > > Back in February I was investigating ways of distributing it. At that > time I decided on a contribution to the Zend Framework since I use it almost > weekly at this point. The other option has been PEAR though I was unsure at > the time whether JanRain were progressing their proposal or considering > amendments. > > > > If JanRain are not persuing their proposal, it's worth noting the Zend > Framework's CLA (contributor agreement) does not impinge on my rights as the > libraries copyright holder. So it's entirely valid to make a similar release > into PEAR and I'd be interested in doing so in the future once the open > source library is finalised (mainly refactoring out some of my time saving > practices from the original 1.1 library). > > > > Once I have sorted out where the Zend Framework proposal is heading, > I'll revisit a PEAR proposal here. The code should already follow most of > the PEAR coding standard since the framework uses a similar standard. When > it's more available I'll also let folk here know where it can be looked > over, prodded, and generally picked apart for comment. > > Let me add to the chorus... This would be a good addition to PEAR. The > JanRain package is in a usable state, but having something more PEAR'ish > would be nice. > > FWIW: I've worked with OpenID before, so if you need any help and/or > someone to bounce ideas off of feel free to shoot me an email. > > -Travis > > -- > PEAR Development Mailing List (http://pear.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > > > > > > > > > > ____________________________________________________________________________________ > Bored stiff? Loosen up... > Download and play hundreds of games for free on Yahoo! Games. > http://games.yahoo.com/games/front ___________________________________________________________________________________ You snooze, you lose. Get messages ASAP with AutoCheck in the all-new Yahoo! Mail Beta. http://advision.webevents.yahoo.com/mailbeta/newmail_html.html