Run OpenID self-certification testing suits, and get an OpenID Certification

[bobbyrullo]

Issue by yifan-gu
Friday Jul 24, 2015 at 19:36 GMT
Originally opened as https://github.com/coreos-inc/auth/issues/336

---

OpenID Foundation provides a series of testing suits to verify the OpenID Connect implementation:
http://openid.net/certification/
We should go through these process and run the testing suit against our authd implementation. We should at least pass the OP basic and OP config profile before open sourcing authd.

If we want to get the certification mark, we would need to become a member of the foundation and submit a request.

/cc @bobbyrullo @bcwaldon @philips

[bobbyrullo]

Comment by sym3tri
Friday Jul 24, 2015 at 20:09 GMT

---

+1 good find
On Fri, Jul 24, 2015 at 12:36 PM Yifan Gu notifications@github.com wrote:

OpenID Foundation provides a series of testing suits to verify the OpenID
Connect implementation:
http://openid.net/certification/
We should go through these process and run the testing suit against our
authd implementation. We should at least pass the OP basic and OP config
profile before open sourcing authd.

If we want to get the certification mark, we would need to become a member
of the foundation and submit a request.

/cc @bobbyrullo https://github.com/bobbyrullo @bcwaldon
https://github.com/bcwaldon @philips https://github.com/philips

—
Reply to this email directly or view it on GitHub
https://github.com/coreos-inc/auth/issues/336.

[bobbyrullo]

@yifan-gu have you gotten a chance to try this out yifan?

[yifan-gu]

@bobbyrullo Not yet :(

[yifan-gu]

@bobbyrullo Feel free to take it as I am having pretty much things in hand right now.

[bobbyrullo]

No problem yifan

[bobbyrullo]

This is still important, but taking it off OS ready.

[estroz]

Results as of August 23rd 2017.

[karimhm]

Will ever DEX get certified?

[nabokihms]

I'm working on this one, and I would like to move it forward.

1. Certification process and basic test suite changed a little. We need to actualize our documentation about running certification tests.
2. The only major thing left is to implement sessions in dex. In the current state, dex disrespect all sort of session-related stuff, including auth_time claim, max age and prompt options. I will open a new issue to discuss the design first.

Thus it looks like we are on our way to pass basic certification.

[sagikazarmark]

Progress will be tracked in this project: https://github.com/orgs/dexidp/projects/3/views/1

@nabokihms can you please open new issues and add them to this project if you have any details already? Thanks!