hdknr’s posterous

　現在GMO-PGでは、ECサイト構築オープンソース「EC-CUBE」でのOpenID決済サービス連携実証を進めている。具体的には、属性情報交換の拡張仕様「OpenID AX」を実装。年内にはAXのセキュリティ面をより強化した拡張仕様への対応も視野に入れているという。さらに、クレジットカード決済以外のさまざまな決済手段への拡張を視野に入れ、システム面、法制度面などでも関係機関と連携しながら評価・検証を行っていく考え。

Ran into the same issue. Some digging in AX.php got me a working start. Haven't looked for any bugs, nor tested beyond basic, nor tested with anyone other than Google. This is not pretty: needs error handling, etc. But this should get you started. Will post an update if I have something robust...

First to throw ...

//      oid_request.php
// Just tested this with/for Google, needs trying with others ...
$oid_identifier = 'https://www.google.com/accounts/o8/id';
// Includes required files
require_once "Auth/OpenID/Consumer.php";
require_once "Auth/OpenID/FileStore.php";
require_once "Auth/OpenID/AX.php";
// Starts session (needed for YADIS)
session_start();
// Create file storage area for OpenID data
$store = new Auth_OpenID_FileStore('./oid_store');
// Create OpenID consumer
$consumer = new Auth_OpenID_Consumer($store);
// Create an authentication request to the OpenID provider
$auth = $consumer->begin($oid_identifier);
// Create attribute request object
// See http://code.google.com/apis/accounts/docs/OpenID.html#Parameters for parameters
// Usage: make($type_uri, $count=1, $required=false, $alias=null)
$attribute[] = Auth_OpenID_AX_AttrInfo::make('http://axschema.org/contact/email',2,1, 'email');
$attribute[] = Auth_OpenID_AX_AttrInfo::make('http://axschema.org/namePerson/first',1,1, 'firstname');
$attribute[] = Auth_OpenID_AX_AttrInfo::make('http://axschema.org/namePerson/last',1,1, 'lastname');
// Create AX fetch request
$ax = new Auth_OpenID_AX_FetchRequest;
// Add attributes to AX fetch request
foreach($attribute as $attr){
        $ax->add($attr);
}
// Add AX fetch request to authentication request
$auth->addExtension($ax);
// Redirect to OpenID provider for authentication
$url = $auth->redirectURL('http://localhost:4001', 'http://localhost:4001/oid_catch.php');
header('Location: ' . $url);

... and then to catch

<?php
//      oid_catch.php
// Includes required files
require_once "Auth/OpenID/Consumer.php";
require_once "Auth/OpenID/FileStore.php";
require_once "Auth/OpenID/AX.php";
// Starts session (needed for YADIS)
session_start();
// Create file storage area for OpenID data
$store = new Auth_OpenID_FileStore('./oid_store');
// Create OpenID consumer
$consumer = new Auth_OpenID_Consumer($store);
// Create an authentication request to the OpenID provider
$auth = $consumer->complete('http://localhost:4001/oid_catch.php);
if ($response->status == Auth_OpenID_SUCCESS) {
        // Get registration informations
        $ax = new Auth_OpenID_AX_FetchResponse();
        $obj = $ax->fromSuccessResponse($response);
        // Print me raw
        echo '<pre>';
        print_r($obj->data);
        echo '</pre>';
        exit;

} else {
  // Failed
}

Those ought to be the basics...

DROP TABLE IF EXISTS `s_openid_cxassociations`;
CREATE TABLE IF NOT EXISTS `s_openid_cxassociations` (
  `artifact`  varchar(255) NOT NULL, ---- add
  `realm`     varchar(255) NOT NULL, ---- add
  `server_url` blob NOT NULL,
  `handle` varchar(255) NOT NULL,
  `secret` blob NOT NULL,
  `issued` int(11) NOT NULL,
  `lifetime` int(11) NOT NULL,
  `assoc_type` varchar(64) NOT NULL,
  `proposal` blob NOT NULL,          ---- add
  `contract` blog NULL,              ---- add
--  PRIMARY KEY  (`server_url`(255),`handle`)
  PRIMARY KEY  (`artifact`,`realm` ) ---- changed
) ENGIN

この方式だと変更がおおきすぎるな。。。　Association ← Contract のERでContractを追加したほうがいいかも。