YADIS best practice?
Peter Davis
peter.davis at neustar.biz
Fri Jan 20 22:40:49 UTC 2006
On 1/20/2006 3:14 PM, "Josh Hoyt" <josh at janrain.com> wrote:
>>> <Service>
>>> <Type>http://openid.net/signon/1.0</Type>
>>> <URI>http://openid.example.com/</URI>
>>> </Service>
>>> <Service>
>>> <Type>http://openid.net/signon/1.1</Type>
>>> <URI>http://openid.example.com/</URI>
>>> </Service>
>>>
>>> or is this better practice:
>>>
>>> <Service>
>>> <Type>http://openid.net/signon/1.0</Type>
>>> <Type>http://openid.net/signon/1.1</Type>
>>> <URI>http://openid.example.com/</URI>
>>> </Service>
>>>
>>> or doesn't it matter?
>
> I'm not sure I understand the difference. It seems to me that the
> first version also implies that the URI supports both protocols as
> well.
>
If, as an implementation, I'd like to advertise support for both 1.1 and
1.0, but my deployment conditions require me to use 2 different endpoints,
than you can only use option one. Option 2 provides no means to indicate
which endpoint supports which protocol version.
But using the first case, I can do:
<Service>
<Type>http://openid.net/signon/1.0</type>
<URI>http://my.example.biz/verion1/endpoint</URI>
</Service>
<Service>
<Type>http://openid.net/signon/1.1</type>
<URI>http://my.example.biz/verion11/endpoint</URI>
</Service>
The spec should let you do either. I'm just pointing out the issue in the
second example.
=peterd (http://public.xdi.org/=peterd)
More information about the yadis
mailing list