atomsite.net

The next release will contain full support for OpenID for both normal logins and comments.  OpenID can be enabled or disabled per workspace.  When enabled, it adds the new custom OpenID javascript selector to the login page.

It also adds support to the comment section.  Clicking on Login will popup the OpenID javascript selector.

The authentication system was simplified in the process of adding OpenID.  There is a new authentication module called OpenIdAuthenticationModule that can be used along side the existing authentication system built into ASP.NET.  Now, authentication is handled consistently across all modes: Basic, WSSE, OpenId, and Forms.  The authentication service was no longer needed so it has been removed.

The User domain object now implements IIdentity and is available through HttpContext.User.Identity or Thread.CurrentPrincipal.Identity.

Users in the UserRepository can have multiple id's to support multiple OpenID's for each user.

The AppService domain object was also updated to reference these user id's instead of containing actual AtomPerson domain objects.  These updates were propagated to the authorization service.  Also, the AtomPerson domain object was updated with an id property so a reference can be made back to the user repository.

Also, the authorization was cleaned up across the AtomPub and Annotation services.  The role actions "Annotate", "ApproveEntryOrMedia", and "ApproveAnnotation", are now used in place of AnnotationApprovalMode, EntryApprovalMode, and AnnotatationMode.  To control who can annotate and approve, just customize the role matrix. Finally, there is a new setting called AnnotationsOn to allow you to disable annotations regardless of the role matrix.

See the Annotations page for more information.