如何将雅虎用户从OpenId迁移到OAuth [英] How to Migrate Yahoo users from OpenId to OAuth

问题描述

我需要将我的雅虎用户从OpenID 2.0迁移到OAuth 2.0登录（OpenID Connect），因为OpenID 2.0 Relying对于使用OpenID 2.0帐户登录App Engine的党支持将被关闭。

对于我的雅虎用户，我的数据存储中包含以下信息：

• 联合身份： https：// me .yahoo.com / a / ...


• 电子邮件地址
  

当我使用OAuth实现与Yahoo的登录时，我需要使用OAuth进程提供的信息来识别数据存储中的现有用户。然而，雅虎OAuth流程并未提供开放标识（雅虎不支持OpenId Connect），也没有提供电子邮件地址。

所以，如何迁移我现有的雅虎用户从OpenId到OAuth？这两种机制之间的共同信息是建立链接并执行迁移？

备注：这适用于Google登录，因为Google支持OpenId Connect。在这种情况下，OpenId Connect / open-id == OpenId / federated identity，这使得用户可以迁移。

解决方案

One可能的方法是切换到Google Identity Toolkit，它提供：

• 为特定提供商处理特定提供商的联合登录处理对您来说非常透明


• 一种将特定供应商认证的用户从现有方法逐渐迁移到GIT的方法，请参阅5步迁移现有网站部分。

我看到的唯一缺点是GIT支持的提供程序数量有限（通过支持基于密码的身份验证而略微提高了一点）。如果您感兴趣的提供商（如雅虎）位于支持列表中，则不是问题。

I'm using App Engine / java.

I need to migrate my Yahoo users from OpenID 2.0 to OAuth 2.0 login (OpenID Connect), because OpenID 2.0 Relying Party support for logging in with OpenID 2.0 accounts in to App Engine will be turned off.

For my Yahoo users, I have following information in my datastore:

• federated identity: https://me.yahoo.com/a/...
• email address

When I implement Sign-in with Yahoo using OAuth, I need to use the information provided by the OAuth process to identify the existing user in my datastore. However, the Yahoo OAuth process does not provide an open-id (Yahoo does not support OpenId Connect) and no email address.

So how can I migrate my existing Yahoo users from OpenId to OAuth? What is the common information between both mechanisms to make the link and perform the migration?

Remark: This works fine for Sign-in with Google, because Google supports OpenId Connect. In this case OpenId Connect / open-id == OpenId / federated identity, which makes it possible to migrate users.

解决方案

One possible approach is to switch to Google Identity Toolkit which offers:

• federated login handling specifics for a particular provider pretty much transparently for you
• a way of gradually migrating users authenticated by a particular provider from your existing method to the GIT one, see the "Migrate an existing site in 5 steps" section.

The only drawback I see is the limited number of providers GIT supports (sweetened a bit by support for password-based authentication). Not an issue if the providers you're interested in, like Yahoo, are in the supported list.

这篇关于如何将雅虎用户从OpenId迁移到OAuth的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！