Comment 35 for bug 881019

On 28/05/12 12:27, James E. Blair wrote:
> With respect to the OpenStack Gerrit, it's not that the consumer is
> buggy, it's that since we're trying to _integrate_ with Launchpad, we
> need to know the _Launchpad_ user of the person who is authenticating to
> us. It's not enough to just know be given an opaque identifier, we need
> to know the Launchpad user ID of that person so that we know what groups
> they are a member of, etc. If we just wanted to use an opaque OpenID
> provider, we could have used any number of other ones. The value in
> using Launchpad's OpenID provider is that we can integrate our tools and
> processes with Launchpad.
>
> William, a while ago you suggested an API call that would allow us to
> query all of the identifiers for a given Launchpad account? I believe
> we can work around the problem if that's added. Do you still think that
> would be feasible?

After discussion with Summit developers this morning, I'm adding an API
to go the other way: given an OpenID identifier, you'll be able to
easily ask for the corresponding Launchpad account. That's bug #1005330.

Can you alter the gerrit login process enough to use that API? Adding a
second API for account -> identifiers would work for you, and is doable,
but it doesn't make a huge amount of sense so it would be nice to avoid it.