Status of OpenID Consumer in Bugzilla

[Christian Robottom Reis]

On Thu, Jun 30, 2005 at 08:37:36PM -0700, Rob Lanphier wrote:
> I'm trying to decide how many shortcuts I take to get this to work.  In
> particular, here's the list of questions I have:
> *  Where should the OpenID URI be stored?

Good question -- I assume the only reasonable place is in the profiles
table.

> *  Should user log in using email or by OpenID?

Allowing either might be nice.

> *  Should email verification process still occur?

Yes. We don't want a user in Bugzilla without a valid email.

> *  Should a confirm hash style verification (ala Mailman or GForge) be
> created, as opposed to mailing a password to the user?

Why not use the existing Token mechanism?

> *  How should createaccount.cgi modification be done?

This is a rather open question :-)

Take care,
--
Christian Robottom Reis | http://async.com.br/~kiko/ | [+55 16] 3376 0125