oidc-client-ts icon indicating copy to clipboard operation
oidc-client-ts copied to clipboard

any plans on getting OpenId certified ?

Open Badisi opened this issue 3 years ago • 13 comments

oidc-client-js was certified by OpenId (#oidc-client-js 1.3), so I was wondering if you guys are planning to also do so ?

Badisi avatar Dec 18 '21 10:12 Badisi

When I did it originally it was free. Now it costs a non-trivial amount, even for FOSS projects.

brockallen avatar Dec 18 '21 17:12 brockallen

Thanks @brockallen ! I didn't know about that.

https://openid.net/certification/fees

Member Certification Fees $700.00 USD per new deployment

Non-Member Certification Fees $3500.00 USD per new deployment

That's rough from a non-profit foundation... 😳

Badisi avatar Dec 18 '21 18:12 Badisi

It would be really nice to have this library certified. However i am not so sure that is possible due to the fact that we removed the deprecated implicit flow. And we will not bring it back! When i look at the certification page, this all seems to be from 2015, we have soon 2022!

The price should not be a problem as for open source libraries, they still support waiver of certification fees as described here: https://openid.net/certification/open-source-project-certification-policy/

pamapa avatar Dec 19 '21 09:12 pamapa

I don't think that implicit flow will block a certification (or waiving of the certification fees).

Also have a look at the already certified relying parties: https://openid.net/certification/#RPs There are some RPs that did not certify the implicit flow. So this shouldn't be a problem, I guess.

raman-nbg avatar Jan 13 '22 10:01 raman-nbg

A first, smaller step could be to get listed as an "Uncertified OpenID Connect Implementation": https://openid.net/developers/uncertified/

raman-nbg avatar Jan 13 '22 10:01 raman-nbg

+1 on this. My company will only use a certified library, which means we are being directed to use oidc-client-js, which we know is deprecated.

Anything we can do to help get this project certified?

chandlerkent avatar Aug 16 '22 16:08 chandlerkent

I am open to certificate this library and are willing to help and support. If some body of the community would take the lead and process this, I would really appreciate it!

pamapa avatar Aug 24 '22 15:08 pamapa

@pamapa, can I contact them on your behalf ?

Badisi avatar Mar 02 '23 09:03 Badisi

Any updates on this topic? I'm also interested in knowing if the OIDC certification is being attempted soon. Thanks

hugogz avatar Jun 02 '23 08:06 hugogz

@hugogz, thanks for the ping because I completely forgot about this. I'll have a look at it asap

Badisi avatar Jun 02 '23 12:06 Badisi

Hi there, just wondering if there is any update on this topic? Thanks.

alextse avatar Aug 30 '23 12:08 alextse

Hello everyone, this project is really useful! Is the certification process ungoing, @pamapa @Badisi ?

ines-lgd avatar Mar 08 '24 13:03 ines-lgd

Yes, and this is something I actually have to discuss with @pamapa. We will keep you posted in this ticket.

Badisi avatar Mar 08 '24 14:03 Badisi