简体繁体 English

跨站点身份验证和Zend框架

[英]Cross Site Authentication and Zend Framework

原文 2009-10-01 09:11:38 5 2 php/ zend-framework/ authentication/ cross-site

I have been asked to implement a cross site login solution in Zend Framework. 我被要求在Zend Framework中实现跨站点登录解决方案。

I have thought about perhaps using OpenID, are there any other solutions to make a login persist across many sites? 我考虑过也许使用OpenID，是否还有其他解决方案可以使登录在许多站点上持续存在？

In some ways a closed system hosted by us would suit better. 在某些方面，由我们托管的封闭系统会更适合。

2 个解决方案

I would go with openid (see http://framework.zend.com/manual/en/zend.openid.provider.html ) but you can also make the login action connect to common database... 我会使用openid（请参阅http://framework.zend.com/manual/en/zend.openid.provider.html ），但您也可以使登录操作连接到通用数据库...

I think you can't easily make user connected across different domains as long as the cookies are domain specific... 我认为，只要Cookie是特定于域的，您就无法轻松地使用户跨不同的域连接...

I think the login solution implemented right here at StackOverflow is pretty sweet. 我认为在StackOverflow此处实施的登录解决方案非常不错。 It offers a variety of authentication services. 它提供各种身份验证服务。 Personally, I feel like providing Google and/or Facebook as the auth provider will cover a large percentage of users. 就个人而言，我想提供Google和/或Facebook作为身份验证提供程序将覆盖很大一部分用户。

As tomas.fejfar mentioned, it would be tough to use a non-OAuth solution due to browser security. 正如tomas.fejfar所述，由于浏览器的安全性，很难使用非OAuth解决方案。