Step 1: Installationre:claimID is implemented as part of GNUnet (starting from version >=0.11.5).
Currently, we recommend the use of our GNUnet docker image due to the lack of packages:
$ docker run -v $HOME/.local/share/gnunet:/root/.local/share/gnunet -p 7776:7776 -td reclaimid/gnunet-docker
Step 2: Registering an OpenID Connect client
The easiest way to manage OpenID Connect client is through our CLI tool:
$ gem install reclaim-oidc
To register an OpenID Connect client, execute:
$ reclaim-oidc --add --client-name myclient --redirect-uri https://mywebsite.com/oidc_cb --description "My Client"
You can list all registered clients and your local OpenID Connect metadata required to initiate an authorization code flow by executing:
$ reclaim-oidc --list
The response will look like this
OpenID Connect Provider Information:
Authorize Endpoint: http://localhost:7776/openid/authorize
Token Endpoint: http://localhost:7776/openid/token
JSON-Web-Token Algorithm: HS512
JSON-Web-Token key: secret
Example Authorization Redirect:
description: My Client
Step 3: Website integration
You can use the information above to integrate re:claimID as a generic OpenID Connect Identity Provider into the web application of your choice. The integration steps for this part depend on the application you use. Hence, please refer to your respective documentation or the OpenID Connect specifications.
The sources of our demo website can be found in our gitlab project.