blocks|key|55865|text|到目前为止，据我所知，还没有工具可以报告是否符合标准。如果你真的想确保你的代码是2.0兼容的，你应该雇佣一些独立的顾问来检查你的openID+2.0的每个功能的单元测试。当然，他们也应该做自己的测试。顾问必须有经验的审计一般，如PCI+DSS等。他们有经验的规格和测试您的应用程序库和数据库。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|55866|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

As of now, and to the best of my knowledge there are no tools that can report compliance with standard. If you really want to make sure that your code is 2.0 compliant, you should hire some independent consultants to review your unit tests for each function of openID 2.0. They should also do thier own testing of course. The consultants must be experienced with auditing in general like PCI DSS, etc. They are experienced to go over the spec and test your app libraries and database.

blocks|key|2542776|text|据我所知，没有一致性测试(至少是官方批准的)-即使是1.1。当然，这将是非常有价值的东西。oAuth也是如此-它们都是复杂的协议，有时规范并不能涵盖所有内容。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2542777|也许你现在唯一能做的就是在本地进行全面的单元测试。|2542778|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

There are no conformance tests (at least officially approved) that I know of - even for 1.1. Certainly its something that would be very high value. Same goes for oAuth - they're both complex protocols and sometimes event the spec doesn't cover everything. 

Probably the only thing you can do right now is thorough unit testing coverage locally.

blocks|key|2754270|text|OSIS有interoperability+tests、feature+tests+for+IPs和feature+tests+for+RPs|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2754271|然而，这些都不是自动化的，每个人都聚集在一个RSA会议上，并检查它们都是相互协作的。|2754272|entityMap|0|LINK|mutability|MUTABLE|url|http://osis.idcommons.net/wiki/I3:Cross_Solution_OpenID_Identity_Provider_x_Relying_Party_Results|1|http://osis.idcommons.net/wiki/I5:OpenID_Identity_Provider_FeatureTest_Results|2|http://osis.idcommons.net/wiki/I5:OpenID_Relying_Party_FeatureTest_Results^0|5|M|0|S|L|1|1E|L|2|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]|$A|V|B|W|1|X]|$A|Y|B|Z|1|10]]|C|$]]|$1|D|3|E|5|6|7|11|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|12|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]|N|$5|I|J|K|C|$L|O]]|P|$5|I|J|K|C|$L|Q]]]]

OSIS have <a href="http://osis.idcommons.net/wiki/I3:Cross_Solution_OpenID_Identity_Provider_x_Relying_Party_Results" rel="nofollow noreferrer">interoperability tests</a>, <a href="http://osis.idcommons.net/wiki/I5:OpenID_Identity_Provider_FeatureTest_Results" rel="nofollow noreferrer">feature tests for IPs</a> and <a href="http://osis.idcommons.net/wiki/I5:OpenID_Relying_Party_FeatureTest_Results" rel="nofollow noreferrer">feature tests for RPs</a>

However these aren't automated, everyone gets together at one of the RSA conferences and checks they all work with each other.

blocks|key|55339|text|只有1.1版本才有这样的东西：http://openidenabled.com/resources/openid-test/diagnose-server/|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|55340|我们从未将其升级到2.0。每年都有一两次有人说“嘿，我们应该有更好的测试工具”，但据我(和其他人，从这里的回应判断)所知，这些努力还没有取得成果。|55341|编辑后添加:另一个相关项目位于http://code.google.com/p/openid-test/|55342|entityMap|0|LINK|mutability|MUTABLE|url|http://openidenabled.com/resources/openid-test/diagnose-server/|1|http://code.google.com/p/openid-test/^0|F|1R|0|0|0|F|11|1|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]|P|$5|K|L|M|C|$N|Q]]]]

There's this thing for 1.1-only: <a href="http://openidenabled.com/resources/openid-test/diagnose-server/" rel="noreferrer">http://openidenabled.com/resources/openid-test/diagnose-server/</a>

We never upgraded it for 2.0. Once or twice a year someone comes along and says "hey, we should have better testing tools," but as far as I (and others, judging from the responses here) know, none of those efforts has bore fruit yet.

Edited to add: another related project is at <a href="http://code.google.com/p/openid-test/" rel="noreferrer">http://code.google.com/p/openid-test/</a>

blocks|key|55967|text|您可以看看http://test-id.net/，它有一组用.net编写的测试。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|55968|entityMap|0|LINK|mutability|MUTABLE|url|http://test-id.net/^0|5|J|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

You could look at <a href="http://test-id.net/" rel="noreferrer">http://test-id.net/</a> which has a set of tests written in .net.

blocks|key|55976|text|如果有人偶然发现了这条线索，OpenID连接现在有一个官方的一致性测试套件，它是认证过程的一部分：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|55977|https://openid.net/certification/testing/|offset|length|55978|享受吧！|55979|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|15|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@$D|Q|E|R|1|S]]|A|$]]|$1|F|3|G|5|6|7|T|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|C]]]]

In case anyone stumbles across this thread, OpenID Connect now has an official conformance test suite that is part of the certification process:

<a href="https://openid.net/certification/testing/" rel="nofollow noreferrer">https://openid.net/certification/testing/</a>

Enjoy!

What automated standards-conformance tests are there for OpenID providers?

I'm making changes to the implementation of an <a href="http://openid.net/" rel="noreferrer">OpenID</a> provider, to bring it from version 1.1 of the standard to version 2.0.

Before releasing the code, I want to be sure that it conforms to the specifications of the standard. For testing web standards compliance, the W3C has validator tools. What tools exist so that I can point an automated tester at my OpenID provider and get a report of compliance with the standard?

Compliance test for OpenID providers

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

针对提供商的OpenID自动化标准一致性测试有哪些？我正在对提供程序的实现进行更改，使其从标准的1.1版升级到2.0版。在发布代码之前，我想确保它符合标准的规范。为了测试web标准的一致性，W3C提供了验证器工具。有什么工具可以让我通过将自动化测试人员指向我的OpenID provider，并获得符合标准的报告？

问OpenID提供程序的符合性测试
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问OpenID提供程序的符合性测试EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问OpenID提供程序的符合性测试
EN