Integrating OpenID in an ASP.NET MVC Application using DotNetOpenAuth

HowtoimplementOpenIdinanMVCApplication

<%using(Html.BeginForm(new{Controller="Account",Action="OpenIdLogon"}))
{%>
<fieldset>
<divclass="containercontent">
<divclass="labelheaderblock">LogonusingOpenId:</div>
<inputid="openid_identifier"name="openid_identifier"/>
<inputid="btnOpenIdLogin"type="submit"value="Login"/>
<imgid="imgOpenIdLoginProgress"src="<%=ResolveUrl("~/css/images/loading_small.gif")%>"style="display:none"/>

<divid="divOpenIdIcons">
<imgsrc="<%=ResolveUrl("~/images/openid-icon.png")%>"onclick="openIdUrl('openid')"title="myopenid.com"class="hoverbutton"/>
<imgsrc="<%=ResolveUrl("~/images/google-icon.png")%>"onclick="openIdUrl('google')"title="Google"class="hoverbutton"/>
<imgsrc="<%=ResolveUrl("~/images/yahoo-icon.png")%>"onclick="openIdUrl('yahoo')"title="Yahoo"class="hoverbutton"/>
</div>
</div>
</fieldset>
<%}%>

functionopenIdUrl(site)
{
varvalue="";
varautoClick=false;

if(site=="openid"){
value="<YourAccount>.myopenid.com"
}
elseif(site=="google"){
value="https://www.google.com/accounts/o8/id";
autoClick=true;
}
elseif(site=="yahoo"){
value="http://yahoo.com/"
autoClick=true;
}

if(value){
varjText=$("#openid_identifier");
jText.val(value)
.focus();
if(autoClick)
$("#btnOpenIdLogin").trigger("click");
}
}

[AcceptVerbs(HttpVerbs.Post|HttpVerbs.Get),ValidateInput(false)]
publicActionResultOpenIdLogOn(stringreturnUrl)
{
varopenid=newOpenIdRelyingParty();
varresponse=openid.GetResponse();

if(response==null)//Initialoperation
{
//Step1-SendtherequesttotheOpenIdproviderserver
Identifierid;
if(Identifier.TryParse(Request.Form["openid_identifier"],outid))
{
try
{
varreq=openid.CreateRequest(Request.Form["openid_identifier"]);
returnreq.RedirectingResponse.AsActionResult();
}
catch(ProtocolExceptionex)
{
//displayerrorbyshowingoriginalLogOnview
this.ErrorDisplay.ShowError("Unabletoauthenticate:"+ex.Message);
returnView("Logon",this.ViewModel);
}
}
else
{
//displayerrorbyshowingoriginalLogOnview
this.ErrorDisplay.ShowError("Invalididentifier");
returnView("LogOn",this.ViewModel);
}
}
else//OpenIdredirectioncallback
{
//Step2:OpenIDProvidersendingassertionresponse
switch(response.Status)
{
caseAuthenticationStatus.Authenticated:
stringidentifier=response.ClaimedIdentifier;

//OpenIdlookupfails-Iddoesn'texistforlogin-loginfirst
if(busUser.ValidateUserOpenIdAndLoad(identifier)==null)
{
this.ErrorDisplay.HtmlEncodeMessage=false;
this.ErrorDisplay.ShowError(busUser.ErrorMessage+
"Please<ahref='"+WebUtils.ResolveUrl("~/Account/Register")+
"'>register</a>tocreateanewaccountor<ahref='"+
WebUtils.ResolveUrl("~/Account/Register")+
"'>associate</a>anexistingaccountwithyourOpenId");

returnView("LogOn",this.ViewModel);
}

//CaptureuserinformationforAuthTicket
//andissueFormsAuthtoken
UserStateuserState=newUserState()
{
Email=busUser.Entity.Email,
Name=busUser.Entity.Name,
UserId=busUser.Entity.Id,
IsAdmin=busUser.Entity.IsAdmin
};
this.IssueAuthTicket(userState,true);

if(!string.IsNullOrEmpty(returnUrl))
returnRedirect(returnUrl);

returnRedirect("~/new");

caseAuthenticationStatus.Canceled:
this.ErrorDisplay.ShowMessage("Canceledatprovider");
returnView("LogOn",this.ViewModel);
caseAuthenticationStatus.Failed:
this.ErrorDisplay.ShowError(response.Exception.Message);
returnView("LogOn",this.ViewModel);
}
}
returnnewEmptyResult();
}

//CaptureuserinformationforAuthTicket
//andissueFormsAuthtoken
UserStateuserState=newUserState()
{
Email=busUser.Entity.Email,
Name=busUser.Entity.Name,
UserId=busUser.Entity.Id,
IsAdmin=busUser.Entity.IsAdmin
};
this.IssueAuthTicket(userState,true);

///<summary>
///IssuesanauthenticationissuefromauserStateinstance
///</summary>
///<paramname="userState"></param>
///<paramname="rememberMe"></param>
privatevoidIssueAuthTicket(UserStateuserState,boolrememberMe)
{
FormsAuthenticationTicketticket=newFormsAuthenticationTicket(1,userState.UserId,
DateTime.Now,DateTime.Now.AddDays(10),
rememberMe,userState.ToString());

stringticketString=FormsAuthentication.Encrypt(ticket);
HttpCookiecookie=newHttpCookie(FormsAuthentication.FormsCookieName,ticketString);
if(rememberMe)
cookie.Expires=DateTime.Now.AddDays(10);

HttpContext.Response.Cookies.Add(cookie);
}

protectedoverridevoidInitialize(System.Web.Routing.RequestContextrequestContext)
{
base.Initialize(requestContext);

//Grabtheuser'slogininformationfromFormsAuth
UserStateuserState=newUserState();
if(this.User.Identity!=null&&this.User.IdentityisFormsIdentity)
this.UserState.FromString(((FormsIdentity)this.User.Identity).Ticket.UserData);

//havetoexplicitlyaddthissoMastercanseeuntypedvalue
this.ViewData["UserState"]=this.UserState;
this.ViewData["ErrorDisplay"]=this.ErrorDisplay;
}

Registration–Alittlemorecomplex

<%using(Html.BeginForm(new{Controller="Account",Action="OpenIdRegistrationLogOn"})){%>
<fieldset>
<divclass="containercontent"style="padding:10px20px;">

<%if(string.IsNullOrEmpty(Model.busUser.Entity.OpenId)){%>
<labelfor="openid_identifier"class="labelheaderblock">EnteranOpenIdUrl:</label>
<inputid="openid_identifier"size="40"name="openid_identifier"/>
<inputid="btnOpenIdLogin"type="submit"value="Login"/>
<imgid="imgOpenIdLoginProgress"src="<%=ResolveUrl("~/css/images/loading_small.gif")%>"style="display:none"/>

<divid="divOpenIdIcons">
<imgsrc="<%=ResolveUrl("~/images/openid-icon.png")%>"onclick="openIdUrl('openid')"title="myopenid.com"class="hoverbutton"/>
<imgsrc="<%=ResolveUrl("~/images/google-icon.png")%>"onclick="openIdUrl('google')"title="Google"class="hoverbutton"/>
<imgsrc="<%=ResolveUrl("~/images/yahoo-icon.png")%>"onclick="openIdUrl('yahoo')"title="Yahoo"class="hoverbutton"/>
</div>

<%}else{%>
<labelfor="openid_identifier"class="labelheaderblock">OpenIdAssociation</label>
<imgsrc="<%=ResolveUrl("~/css/images/greencheck.gif")%>"/>Thisuseraccountislinkedto<b><%=Html.Encode(Model.busUser.Entity.OpenId)%></b>
<inputid="btnOpenIdUnlink"name="btnOpenIdUnlink"type="submit"value="Unlink"/>
<%}%>

<%=Html.Hidden("Id2",this.Model.busUser.Entity.Id)%>
</div>
</fieldset>
<%}%>

[AcceptVerbs(HttpVerbs.Post|HttpVerbs.Get),ValidateInput(false)]
publicActionResultOpenIdRegistrationLogOn(FormCollectionformVars)
{
returnOpenIdRegistrationLogOn(null,true);
}

privateActionResultOpenIdRegistrationLogOn(IAuthenticationResponseresponse,boolreserved)
{
this.ViewData["IsNew"]=true;

varopenid=newOpenIdRelyingParty();

if(response==null)
response=openid.GetResponse();

if(response==null)
{
stringuserId=Request.Form["Id2"];//havetotracktheuser’sid

//Checkforunlinkoperation
if(!string.IsNullOrEmpty(Request.Form["btnOpenIdUnlink"]))
{
if(busUser.Load(userId)==null)
{
this.ErrorDisplay.ShowError("Couldn'tfindassociatedUser:"+busUser.ErrorMessage);
returnRedirectToAction("Register",new{id=userId});
}
busUser.Entity.OpenId="";
busUser.Save();
returnRedirectToAction("Register",new{id=userId});
}

Identifierid;
stringopenIdIdentifier=Request.Form["openid_identifier"];
if(Identifier.TryParse(openIdIdentifier,outid))
{
try
{
//Weneedtoknowwhichuserweareworkingwith
//andsowepasstheidthrusession–(isthereabetterway?)


Session["userId"]=userId;

varreq=openid.CreateRequest(id);

varfields=newClaimsRequest();
fields.Email=DemandLevel.Request;
fields.FullName=DemandLevel.Request;
req.AddExtension(fields);

returnreq.RedirectingResponse.AsActionResult();
}
catch(ProtocolExceptionex)
{
this.ErrorDisplay.ShowError("Unabletoauthenticate:"+ex.Message);
this.busUser.NewEntity();
returnView("Register",this.ViewModel);
}
}
else
{
ViewData["Message"]="Invalididentifier";
returnView("Login");
}
}
else
{
//Reestablishtheuserwe’redealingwith

stringuserId=Session["userId"]asstring;
if(string.IsNullOrEmpty(userId))
ViewData["IsNew"]=true;
else
ViewData["IsNew"]=false;

//Stage3:OpenIDProvidersendingassertionresponse
switch(response.Status)
{
caseAuthenticationStatus.Authenticated:
varclaim=response.GetExtension<ClaimsResponse>();
stringemail=null,fullname=null;
if(claim!=null)
{
email=claim.Email;
fullname=claim.FullName;
}
stringidentifier=response.ClaimedIdentifier;

varuser=busUser.Load(userId);
if(user==null)
{
user=busUser.ValidateUserOpenIdAndLoad(identifier);
if(user==null)
user=busUser.NewEntity();
}

//associateopenidwiththeuseraccount
busUser.Entity.OpenId=identifier;

if(!string.IsNullOrEmpty(email)&&string.IsNullOrEmpty(busUser.Entity.Email))
busUser.Entity.Email=email;

if(!string.IsNullOrEmpty(fullname)&&string.IsNullOrEmpty(busUser.Entity.Name))
busUser.Entity.Name=fullname;

if(string.IsNullOrEmpty(busUser.Entity.Name))
{
stringhost=StringUtils.ExtractString(response.FriendlyIdentifierForDisplay,".",".com");
if(!string.IsNullOrEmpty(host))
host="("+host+")";

busUser.Entity.Name="Unknown"+host;

this.ErrorDisplay.DisplayErrors.Add("Pleaseenterausername","Name");
}

if(!busUser.Validate())
{
busUser.Entity.OpenId="";
this.ErrorDisplay.ShowError(busUser.ErrorMessage);
returnView("Register",this.ViewModel);
}
if(!busUser.Save())
{
busUser.Entity.OpenId="";
this.ErrorDisplay.ShowError(busUser.ErrorMessage);
returnView("Register",this.ViewModel);
}

UserStateuserState=newUserState()
{
Name=busUser.Entity.Name,
Email=busUser.Entity.Name,
UserId=busUser.Entity.Id,
IsAdmin=busUser.Entity.IsAdmin
};
this.IssueAuthTicket(userState,true);

//andreloadthepagewiththesaveddata
returnthis.RedirectToAction("Register",new{id=busUser.Entity.Id});
caseAuthenticationStatus.Canceled:
this.busUser.NewEntity(true);
this.ErrorDisplay.ShowMessage("Canceledatprovider");
returnView("Register",this.ViewModel);
caseAuthenticationStatus.Failed:
this.busUser.NewEntity(true);
this.ErrorDisplay.ShowError(response.Exception.Message);
returnView("Register",this.ViewModel);
}
}
returnnewEmptyResult();
}

OpenIdIntegration–Morecomplicatedthanitlooks

usingSystem;
usingSystem.Collections.Generic;
usingSystem.Linq;
usingSystem.Web;
usingSystem.Web.Mvc;
usingDotNetOpenAuth.OpenId.RelyingParty;
usingSystem.Reflection;

namespaceSherezade.Web.Filters
{
publicclassOpenIdAuthenticationCallbackAttribute:ActionMethodSelectorAttribute
{
publicoverrideboolIsValidForRequest(ControllerContextcontrollerContext,System.Reflection.MethodInfomethodInfo)
{
varopenid=newOpenIdRelyingParty();
varresponse=openid.GetResponse();

//WedohaveanopenIdresponse,it'stheprovidercallingback
if(response!=null)
{
//lookforIAuthenticationResponseparameterandpasstheresponseobjecttotheactionaswecan'tcallGetResponse()twicelaterintheactionmethod
varparameterName=methodInfo.GetParameters().Where(pi=>pi.ParameterType.Equals(typeof(IAuthenticationResponse))).Select(pi=>pi.Name).SingleOrDefault();
if(!String.IsNullOrEmpty(parameterName))
{
controllerContext.RouteData.Values.Add(parameterName,response);
}
returntrue;
}
returnfalse;
}
}
}

//handlesopenidformsubmissionfromuser
publicActionResultOpenIdLogin()
{
varopenid=newOpenIdRelyingParty();
Identifierid;
if(Identifier.TryParse(Request.Form["openidIdentifier"],outid))
{
try
{
varreq=openid.CreateRequest(Request.Form["openidIdentifier"]);
varfields=newClaimsRequest();
fields.Email=DemandLevel.Require;
req.AddExtension(fields);
returnreq.RedirectingResponse.AsActionResult();
}
catch(ProtocolExceptionex)
{
returnView("Registro",null);
}
}
else
{
returnView("Registro",null);
}
}
//handlestheprovidercallback
[OpenIdAuthenticationCallback]
publicActionResultOpenIdLogin(IAuthenticationResponseresponse)
{
switch(response.Status)
{
caseAuthenticationStatus.Authenticated:
break;
caseAuthenticationStatus.Canceled:
break;
caseAuthenticationStatus.Failed:
break;
}

returnnewEmptyResult();
}