From duraley at gmail.com  Wed Apr 18 15:46:59 2012
From: duraley at gmail.com (Ivan Kurmanov)
Date: Wed, 18 Apr 2012 23:46:59 +0300
Subject: [RAS] OpenID
In-Reply-To: <Pine.WNT.4.64.1203200956330.1020@usuario-aab7161>
References: <CAHGiUkRFWtDhCsdqEyLhs3y+LwTNw59aBePR=eM+OZeaig1QNg@mail.gmail.com>
 <Pine.WNT.4.64.1203200956330.1020@usuario-aab7161>
Message-ID: <CAHGiUkRQKZRozNNi2nOy+FP-7T+AS+7x=ndLjEsmjisL2i5oMQ@mail.gmail.com>

Jose,

On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es>
 wrote:

>
>        Great! I'm ready to follow your advice in this issue. The script
> that could beneficiate of RAS-mediated authentification is:
>
>        http://citec.repec.org/cgi-**bin/ui.pl<http://citec.repec.org/cgi-bin/ui.pl>
>
>        it is used to submit references to the cited database. At the
> moment it requires local users/passwd. The idea woudl be to use RAS users
> so that we don't need to register them locally.,
>

OpenID authentication by itself would mean you'll be able to tell if the
user is a registered RAS user (or not), and you'll have some URL that is
related to the user and is unique. For example, the user's profile page
URL.

Additionally, we can plan that you'll have the user's short-id (it will be
part of the URL). Do you need any other details from RAS about the user?
(like his name, for example)

-ivan


On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es>wrote:

>
>        Great! I'm ready to follow your advice in this issue. The script
> that could beneficiate of RAS-mediated authentification is:
>
>        http://citec.repec.org/cgi-**bin/ui.pl<http://citec.repec.org/cgi-bin/ui.pl>
>
>        it is used to submit references to the cited database. At the
> moment it requires local users/passwd. The idea woudl be to use RAS users
> so that we don't need to register them locally.,
>
>        Regards,
>
>
>
> On Mon, 19 Mar 2012, Ivan Kurmanov wrote:
>
>  Jose,
>>
>> Christian says there's a good place in CitEc to use OpenID integration
>> with
>> RAS. I understand it that some script (or a bunch of them) could benefit
>> from RAS-mediated authenticated. I'm approaching this part of my work on
>> ACIS now. I'd be happy to work with you on building this integration from
>> both sides: me from the RAS side, you from the CitEc side. What do you
>> think?
>>
>> -ivan
>>
>>
>
> ---
> Jos? Manuel Barrueco                            http://www.uv.es/=barrueco
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/ras-run/attachments/20120418/fdb48ddf/attachment.html>

From duraley at gmail.com  Wed Apr 18 18:02:27 2012
From: duraley at gmail.com (Ivan Kurmanov)
Date: Thu, 19 Apr 2012 02:02:27 +0300
Subject: [RAS] issue fixed: direct login to a specific screen
Message-ID: <CAHGiUkQ=wKUdAMP-yvXvnjnz3bYW2xC5W21b05hAE8zAwoKQYQ@mail.gmail.com>

Hi,

A couple of days ago I've started examining the recent error logs from RAS,
and I've noticed an issue. Some users loggin in to a direct screen in RAS,
like /research/autosuggest (via
https://authors.repec.org/research/autosuggest) were getting an
"Application error". I've spent some time debugging and found this to be
very serious: this error happend to many users.

If I understand it right, it primarily happened to those who clicked on the
links like the mentioned above in the automatic mails. I still do not know
if it happened to all of them or to some.

Now I've made a fix and have installed it today. I hope this error does not
happen again. I'll keep monitoring and fixing issues.


-ivan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/ras-run/attachments/20120419/8e6eed76/attachment.html>

From barrueco at uv.es  Thu Apr 19 02:22:42 2012
From: barrueco at uv.es (Jose Manuel Barrueco)
Date: Thu, 19 Apr 2012 09:22:42 +0200 (Hora de verano romance)
Subject: [RAS] OpenID
In-Reply-To: <CAHGiUkRQKZRozNNi2nOy+FP-7T+AS+7x=ndLjEsmjisL2i5oMQ@mail.gmail.com>
References: <CAHGiUkRFWtDhCsdqEyLhs3y+LwTNw59aBePR=eM+OZeaig1QNg@mail.gmail.com>
 <Pine.WNT.4.64.1203200956330.1020@usuario-aab7161>
 <CAHGiUkRQKZRozNNi2nOy+FP-7T+AS+7x=ndLjEsmjisL2i5oMQ@mail.gmail.com>
Message-ID: <Pine.WNT.4.64.1204190920050.2776@usuario-aab7161>


> Jose,
>
> OpenID authentication by itself would mean you'll be able to tell if the
> user is a registered RAS user (or not), and you'll have some URL that is
> related to the user and is unique. For example, the user's profile page
> URL.
>
> Additionally, we can plan that you'll have the user's short-id (it will 
> be part of the URL). Do you need any other details from RAS about the 
> user? (like his name, for example)

 	I don't think so. Having the short-id should be enough since all 
other relevant data about the author is already in CitEc. Regards,







>
> -ivan
>
>
> On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es>wrote:
>
>>
>>        Great! I'm ready to follow your advice in this issue. The script
>> that could beneficiate of RAS-mediated authentification is:
>>
>>        http://citec.repec.org/cgi-**bin/ui.pl<http://citec.repec.org/cgi-bin/ui.pl>
>>
>>        it is used to submit references to the cited database. At the
>> moment it requires local users/passwd. The idea woudl be to use RAS users
>> so that we don't need to register them locally.,
>>
>>        Regards,
>>
>>
>>
>> On Mon, 19 Mar 2012, Ivan Kurmanov wrote:
>>
>>  Jose,
>>>
>>> Christian says there's a good place in CitEc to use OpenID integration
>>> with
>>> RAS. I understand it that some script (or a bunch of them) could benefit
>>> from RAS-mediated authenticated. I'm approaching this part of my work on
>>> ACIS now. I'd be happy to work with you on building this integration from
>>> both sides: me from the RAS side, you from the CitEc side. What do you
>>> think?
>>>
>>> -ivan
>>>
>>>
>>
>> ---
>> Jos? Manuel Barrueco                            http://www.uv.es/=barrueco
>>
>


---
Jos? Manuel Barrueco				http://www.uv.es/=barrueco

From zimmermann at stlouisfed.org  Thu Apr 19 06:23:01 2012
From: zimmermann at stlouisfed.org ('Christian Zimmermann')
Date: Thu, 19 Apr 2012 06:23:01 -0500 (CDT)
Subject: [RAS] OpenID
In-Reply-To: <CAHGiUkRQKZRozNNi2nOy+FP-7T+AS+7x=ndLjEsmjisL2i5oMQ@mail.gmail.com>
References: <CAHGiUkRFWtDhCsdqEyLhs3y+LwTNw59aBePR=eM+OZeaig1QNg@mail.gmail.com>
 <Pine.WNT.4.64.1203200956330.1020@usuario-aab7161>
 <CAHGiUkRQKZRozNNi2nOy+FP-7T+AS+7x=ndLjEsmjisL2i5oMQ@mail.gmail.com>
Message-ID: <alpine.LRH.2.02.1204190621230.31455@repec-mail.stlouisfed.org>

I think the name is essential. having the  short-id separately would be 
good as well. That is: the using service would not need to parse the URL.

On Wed, 18 Apr 2012, Ivan Kurmanov wrote:

> Jose,
>
> On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es>
> wrote:
>
>>
>>        Great! I'm ready to follow your advice in this issue. The script
>> that could beneficiate of RAS-mediated authentification is:
>>
>>        http://citec.repec.org/cgi-**bin/ui.pl<http://citec.repec.org/cgi-bin/ui.pl>
>>
>>        it is used to submit references to the cited database. At the
>> moment it requires local users/passwd. The idea woudl be to use RAS users
>> so that we don't need to register them locally.,
>>
>
> OpenID authentication by itself would mean you'll be able to tell if the
> user is a registered RAS user (or not), and you'll have some URL that is
> related to the user and is unique. For example, the user's profile page
> URL.
>
> Additionally, we can plan that you'll have the user's short-id (it will be
> part of the URL). Do you need any other details from RAS about the user?
> (like his name, for example)
>
> -ivan
>
>
> On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es>wrote:
>
>>
>>        Great! I'm ready to follow your advice in this issue. The script
>> that could beneficiate of RAS-mediated authentification is:
>>
>>        http://citec.repec.org/cgi-**bin/ui.pl<http://citec.repec.org/cgi-bin/ui.pl>
>>
>>        it is used to submit references to the cited database. At the
>> moment it requires local users/passwd. The idea woudl be to use RAS users
>> so that we don't need to register them locally.,
>>
>>        Regards,
>>
>>
>>
>> On Mon, 19 Mar 2012, Ivan Kurmanov wrote:
>>
>>  Jose,
>>>
>>> Christian says there's a good place in CitEc to use OpenID integration
>>> with
>>> RAS. I understand it that some script (or a bunch of them) could benefit
>>> from RAS-mediated authenticated. I'm approaching this part of my work on
>>> ACIS now. I'd be happy to work with you on building this integration from
>>> both sides: me from the RAS side, you from the CitEc side. What do you
>>> think?
>>>
>>> -ivan
>>>
>>>
>>
>> ---
>> Jos? Manuel Barrueco                            http://www.uv.es/=barrueco
>>
>

-- 
Christian Zimmermann                          FIGUGEGL!
Economic Research
Federal Reserve Bank of St. Louis
P.O. Box 442
St. Louis MO 63166-0442 USA
http://ideas.repec.org/zimm/

From duraley at gmail.com  Sat Apr 21 03:02:26 2012
From: duraley at gmail.com (Ivan Kurmanov)
Date: Sat, 21 Apr 2012 11:02:26 +0300
Subject: [RAS] some more issues fixed
Message-ID: <CAHGiUkSAwwKZ9gZn4NkkM-FEOoOZCyOkC495NQEr-SHx2uWtOg@mail.gmail.com>

Christian,

there also was an issue of being unable to change a login (email address)
in RAS in some cases. I've fixed this today.

Also, I've improved some error logging, for the future. I want to fix all
major issues in current RAS before starting active OpenID dev work.

-ivan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/ras-run/attachments/20120421/39eb03e9/attachment.html>

From zimmermann at stlouisfed.org  Sat Apr 21 13:41:30 2012
From: zimmermann at stlouisfed.org ('Christian Zimmermann')
Date: Sat, 21 Apr 2012 13:41:30 -0500 (CDT)
Subject: [RAS] some more issues fixed
In-Reply-To: <CAHGiUkSAwwKZ9gZn4NkkM-FEOoOZCyOkC495NQEr-SHx2uWtOg@mail.gmail.com>
References: <CAHGiUkSAwwKZ9gZn4NkkM-FEOoOZCyOkC495NQEr-SHx2uWtOg@mail.gmail.com>
Message-ID: <alpine.LRH.2.02.1204211330340.31574@repec-mail.stlouisfed.org>

Good. I have a list of things, but it is on my desk and I am travelling. 
Some I remember:

- the admin account cannot delete, or it log out of the admin account when 
doing that, I cannot remember

- By default, the account info is saved in a cookie. This should not be 
default.

- There is a problem when an item title changes. Author profiles keep the 
title when it was first added, and we have had a few cases where  a 
mistake needed to be corrected and the author could not correct the RAS 
profile because it keeps showing the original title

- Similarly, there is an issue with items that change type (from paper to 
to chapter, say). The profile keeps showing the old type.

On Sat, 21 Apr 2012, Ivan Kurmanov wrote:

> Christian,
>
> there also was an issue of being unable to change a login (email address)
> in RAS in some cases. I've fixed this today.
>
> Also, I've improved some error logging, for the future. I want to fix all
> major issues in current RAS before starting active OpenID dev work.
>
> -ivan
>

-- 
Christian Zimmermann                          FIGUGEGL!
Economic Research
Federal Reserve Bank of St. Louis
P.O. Box 442
St. Louis MO 63166-0442 USA
http://ideas.repec.org/zimm/


From duraley at gmail.com  Tue Apr 24 09:57:49 2012
From: duraley at gmail.com (Ivan Kurmanov)
Date: Tue, 24 Apr 2012 17:57:49 +0300
Subject: [RAS] Fwd: OpenID
In-Reply-To: <CAHGiUkQqSH_Ya=e5P1d=4am9K0DJmP8kR-N8kQ-0d+DWi1EhpQ@mail.gmail.com>
References: <CAHGiUkRFWtDhCsdqEyLhs3y+LwTNw59aBePR=eM+OZeaig1QNg@mail.gmail.com>
 <Pine.WNT.4.64.1203200956330.1020@usuario-aab7161>
 <CAHGiUkRQKZRozNNi2nOy+FP-7T+AS+7x=ndLjEsmjisL2i5oMQ@mail.gmail.com>
 <alpine.LRH.2.02.1204190621230.31455@repec-mail.stlouisfed.org>
 <CAHGiUkQqSH_Ya=e5P1d=4am9K0DJmP8kR-N8kQ-0d+DWi1EhpQ@mail.gmail.com>
Message-ID: <CAHGiUkRJZ64kQLJTnmJ7Lo1y+D4Ck-5N0mmaQWejqfDrHC2e+g@mail.gmail.com>

my reply to Christian.

---------- Forwarded message ----------
From: Ivan Kurmanov <duraley at gmail.com>
Date: Tue, Apr 24, 2012 at 11:45 AM
Subject: Re: OpenID
To: Christian Zimmermann <zimmermann at stlouisfed.org>


The OpenID standard does not provide a means for exposing the user name or
other details from the provider (RAS in our case) to the relying part
(CitEc in our case). It only provides a means to check if the user is
registered and actually controlling the URL he has provided. For example,
if the user is actually the owner of the profile page. To expose the name
and shortid we will need to somehow extend the OpenID protocol or simply
let the relying party parse the profile page and extract the needed data
from there.

-ivan

On Thursday, April 19, 2012, Christian Zimmermann wrote:

> I think the name is essential. having the  short-id separately would be
> good as well. That is: the using service would not need to parse the URL.
>
> On Wed, 18 Apr 2012, Ivan Kurmanov wrote:
>
>  Jose,
>>
>> On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es>
>> wrote:
>>
>>
>>>       Great! I'm ready to follow your advice in this issue. The script
>>> that could beneficiate of RAS-mediated authentification is:
>>>
>>>       http://citec.repec.org/cgi-****bin/ui.pl<http://citec.repec.org/cgi-**bin/ui.pl>
>>> <http://citec.repec.**org/cgi-bin/ui.pl<http://citec.repec.org/cgi-bin/ui.pl>
>>> >
>>>
>>>       it is used to submit references to the cited database. At the
>>> moment it requires local users/passwd. The idea woudl be to use RAS users
>>> so that we don't need to register them locally.,
>>>
>>>
>> OpenID authentication by itself would mean you'll be able to tell if the
>> user is a registered RAS user (or not), and you'll have some URL that is
>> related to the user and is unique. For example, the user's profile page
>> URL.
>>
>> Additionally, we can plan that you'll have the user's short-id (it will be
>> part of the URL). Do you need any other details from RAS about the user?
>> (like his name, for example)
>>
>> -ivan
>>
>>
>> On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es
>> >wrote:
>>
>>
>>>       Great! I'm ready to follow your advice in this issue. The script
>>> that could beneficiate of RAS-mediated authentification is:
>>>
>>>       http://citec.repec.org/cgi-****bin/ui.pl<http://citec.repec.org/cgi-**bin/ui.pl>
>>> <http://citec.repec.**org/cgi-bin/ui.pl<http://citec.repec.org/cgi-bin/ui.pl>
>>> >
>>>
>>>       it is used to submit references to the cited database. At the
>>> moment it requires local users/passwd. The idea woudl be to use RAS users
>>> so that we don't need to register them locally.,
>>>
>>>       Regards,
>>>
>>>
>>>
>>> On Mon, 19 Mar 2012, Ivan Kurmanov wrote:
>>>
>>>  Jose,
>>>
>>>>
>>>> Christian says there's a good place in CitEc to use OpenID integration
>>>> with
>>>> RAS. I understand it that some script (or a bunch of them) could benefit
>>>> from RAS-mediated authenticated. I'm approaching this part of my work on
>>>> ACIS now. I'd be happy to work with you on building this integration
>>>> from
>>>> both sides: me from the RAS side, you from the CitEc side. What do you
>>>> think?
>>>>
>>>> -ivan
>>>>
>>>>
>>>>
>>> ---
>>> Jos? Manuel Barrueco
>>> http://www.uv.es/=barrueco
>>>
>>>
>>
> --
> Christian Zimmermann                          FIGUGEGL!
> Economic Research
> Federal Reserve Bank of St. Louis
> P.O. Box 442
> St. Louis MO 63166-0442 USA
> http://ideas.repec.org/zimm/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/ras-run/attachments/20120424/adbb1e3b/attachment-0001.html>

From duraley at gmail.com  Tue Apr 24 10:14:10 2012
From: duraley at gmail.com (Ivan Kurmanov)
Date: Tue, 24 Apr 2012 18:14:10 +0300
Subject: [RAS] OpenID
In-Reply-To: <alpine.LRH.2.02.1204240735140.23344@repec-mail.stlouisfed.org>
References: <CAHGiUkRFWtDhCsdqEyLhs3y+LwTNw59aBePR=eM+OZeaig1QNg@mail.gmail.com>
 <Pine.WNT.4.64.1203200956330.1020@usuario-aab7161>
 <CAHGiUkRQKZRozNNi2nOy+FP-7T+AS+7x=ndLjEsmjisL2i5oMQ@mail.gmail.com>
 <alpine.LRH.2.02.1204190621230.31455@repec-mail.stlouisfed.org>
 <CAHGiUkQqSH_Ya=e5P1d=4am9K0DJmP8kR-N8kQ-0d+DWi1EhpQ@mail.gmail.com>
 <alpine.LRH.2.02.1204240735140.23344@repec-mail.stlouisfed.org>
Message-ID: <CAHGiUkRq+TtR3yid46nn_P9ByXGiVM3GyR8EZPbb0LzNtzKsow@mail.gmail.com>

Agreed.

On Tue, Apr 24, 2012 at 3:35 PM, Christian Zimmermann <
zimmermann at stlouisfed.org> wrote:

> OK then. Keep it simple.
>
>
> On Tue, 24 Apr 2012, Ivan Kurmanov wrote:
>
>  The OpenID standard does not provide a means for exposing the user name or
>> other details from the provider (RAS in our case) to the relying part
>> (CitEc in our case). It only provides a means to check if the user is
>> registered and actually controlling the URL he has provided. For example,
>> if the user is actually the owner of the profile page. To expose the name
>> and shortid we will need to somehow extend the OpenID protocol or simply
>> let the relying party parse the profile page and extract the needed data
>> from there.
>>
>> -ivan
>>
>> On Thursday, April 19, 2012, Christian Zimmermann wrote:
>>
>>  I think the name is essential. having the  short-id separately would be
>>> good as well. That is: the using service would not need to parse the URL.
>>>
>>> On Wed, 18 Apr 2012, Ivan Kurmanov wrote:
>>>
>>>  Jose,
>>>
>>>>
>>>> On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es>
>>>> wrote:
>>>>
>>>>
>>>>       Great! I'm ready to follow your advice in this issue. The script
>>>>> that could beneficiate of RAS-mediated authentification is:
>>>>>
>>>>>      http://citec.repec.org/cgi-******bin/ui.pl<http://citec.repec.org/cgi-****bin/ui.pl>
>>>>> <http://citec.repec.**org/cgi-**bin/ui.pl<http://citec.repec.org/cgi-**bin/ui.pl>
>>>>> >
>>>>> <http://citec.repec.**org/cgi-**bin/ui.pl<http://citec.repec.**
>>>>> org/cgi-bin/ui.pl <http://citec.repec.org/cgi-bin/ui.pl>>
>>>>>
>>>>>
>>>>>>
>>>>>      it is used to submit references to the cited database. At the
>>>>> moment it requires local users/passwd. The idea woudl be to use RAS
>>>>> users
>>>>> so that we don't need to register them locally.,
>>>>>
>>>>>
>>>>>  OpenID authentication by itself would mean you'll be able to tell if
>>>> the
>>>> user is a registered RAS user (or not), and you'll have some URL that is
>>>> related to the user and is unique. For example, the user's profile page
>>>> URL.
>>>>
>>>> Additionally, we can plan that you'll have the user's short-id (it will
>>>> be
>>>> part of the URL). Do you need any other details from RAS about the user?
>>>> (like his name, for example)
>>>>
>>>> -ivan
>>>>
>>>>
>>>> On Tue, Mar 20, 2012 at 11:59 AM, Jose Manuel Barrueco <barrueco at uv.es
>>>>
>>>>> wrote:
>>>>>
>>>>
>>>>
>>>>       Great! I'm ready to follow your advice in this issue. The script
>>>>> that could beneficiate of RAS-mediated authentification is:
>>>>>
>>>>>      http://citec.repec.org/cgi-******bin/ui.pl<http://citec.repec.org/cgi-****bin/ui.pl>
>>>>> <http://citec.repec.**org/cgi-**bin/ui.pl<http://citec.repec.org/cgi-**bin/ui.pl>
>>>>> >
>>>>> <http://citec.repec.**org/cgi-**bin/ui.pl<http://citec.repec.**
>>>>> org/cgi-bin/ui.pl <http://citec.repec.org/cgi-bin/ui.pl>>
>>>>>
>>>>>
>>>>>>
>>>>>      it is used to submit references to the cited database. At the
>>>>> moment it requires local users/passwd. The idea woudl be to use RAS
>>>>> users
>>>>> so that we don't need to register them locally.,
>>>>>
>>>>>      Regards,
>>>>>
>>>>>
>>>>>
>>>>> On Mon, 19 Mar 2012, Ivan Kurmanov wrote:
>>>>>
>>>>>  Jose,
>>>>>
>>>>>
>>>>>> Christian says there's a good place in CitEc to use OpenID integration
>>>>>> with
>>>>>> RAS. I understand it that some script (or a bunch of them) could
>>>>>> benefit
>>>>>> from RAS-mediated authenticated. I'm approaching this part of my work
>>>>>> on
>>>>>> ACIS now. I'd be happy to work with you on building this integration
>>>>>> from
>>>>>> both sides: me from the RAS side, you from the CitEc side. What do you
>>>>>> think?
>>>>>>
>>>>>> -ivan
>>>>>>
>>>>>>
>>>>>>
>>>>>>  ---
>>>>> Jos? Manuel Barrueco
>>>>> http://www.uv.es/=barrueco
>>>>>
>>>>>
>>>>>
>>>>  --
>>> Christian Zimmermann                          FIGUGEGL!
>>> Economic Research
>>> Federal Reserve Bank of St. Louis
>>> P.O. Box 442
>>> St. Louis MO 63166-0442 USA
>>> http://ideas.repec.org/zimm/
>>>
>>
>>
> --
> Christian Zimmermann                          FIGUGEGL!
> Economic Research
> Federal Reserve Bank of St. Louis
> P.O. Box 442
> St. Louis MO 63166-0442 USA
> http://ideas.repec.org/zimm/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/ras-run/attachments/20120424/0c93326f/attachment.html>

