The update_url needs to be sent via the openid client (relying party) to the provider in the fetch request, then:
"If present, the OpenID Provider may re-post the fetch response
message to the specified URL at some time after the initial response
has been sent, using a OpenID Authentication Positive Assertion."
http://openid.net/pipermail/specs/2007-October/002014.html

The update of the values in uni-directional (provider -> relying party) according to the openid specs, the RP should be almost stateless (only caching), so the provider should have always the latest data. We cannot really ensure that the user cannot edit his profile on relying party side, or can we do that?

Things to do on the client side:

  • Provide a menu path for the update_url what identifies the user
  • Handle the incoming values, update the profile node

Sreg modules are not affected, no update mechanism is available for SReg values.

Comments

aron novak’s picture

hook_openid_client() needs to be extended with an 'update' $op as well and update the saved node profile.
openid_client_ax needs to provide that callback url for the provider side.

aron novak’s picture

Good summary here under "Asynchronous Attribute Updates":
http://blogs.gnome.org/jamesh/2007/11/26/openid-ax/

aron novak’s picture

Status: Active » Needs work
StatusFileSize
new2.4 KB

First iteration of the patch. Untested.

aron novak’s picture

sanduhrs’s picture

Status: Needs work » Needs review
Issue tags: +OpenID AX update
StatusFileSize
new2.39 KB

* fixes D5 style call to url()
* swicthing to v2 protocoll for assertion verification
Patch attached.

sanduhrs’s picture

StatusFileSize
new2.65 KB

Updated patch to meet Drupal requirements.

sanduhrs’s picture

Category: task » feature
StatusFileSize
new2.68 KB

Changed the menu item type of openid/update from default MENU_NORMAL_ITEM to MENU_CALLBACK to avoid appearance of empty menu item in navigation menu.

xamanu’s picture

xamanu’s picture

Status: Needs review » Fixed

Status: Fixed » Closed (fixed)
Issue tags: -OpenID AX update

Automatically closed -- issue fixed for 2 weeks with no activity.