Support OpenID Connect

[Barry Warsaw]

While many of us find OpenID very convenient for signing onto external sites, and I am personally glad Launchpad provides such services, it seems that OpenID 1.0 is rapidly becoming obsolete outside of the Launchpad/Ubuntu SSO realm. This bug is a wishlist for adding OpenID Connect support to Launchpad. I suppose that means at least as a provider.

http://openid.net/connect/

[William Grant (wgrant)]

Launchpad itself hasn't been an identity provider for ages, except for the https://launchpad.net/~USERNAME delegation. Does it make sense to have OpenID Connect provider support outside SSO?

[Launchpad Janitor (janitor)]

[Expired for Launchpad itself because there has been no activity for 60 days.]

[Robert Collins (lifeless)]

I think the question is whether there is end user information that LP holds that Ubuntu SSO doesn't. However, you could use OAuth to log in via SSO and query the API, so the benefit would be marginal IMO.

[Robert Collins (lifeless)]

So, to get up to date with modern standards, I think it boils down to two separate things:
- OAuth2 support for LP
- OpenID Connect for Ubuntu SSO

The first isn't really an ecosystem issue, but the latter is arguably.