<link rel="openid.server" href="http://openid./">

<?xml version="1.0" encoding="UTF-8"?>
<xrds:XRDS xmlns:xrds="xri://$xrds" xmlns="xri://$xrd*($v*2.0)"
xmlns:openid="http:///xmlns/1.0">
  <XRD>
    <Service priority="50">
      <Type>http:///signon/1.0</Type>
      <URI>http://www./server</URI>
      <openid:Delegate>http://smoker./</openid:Delegate>
    </Service>
    <Service priority="10">
      <Type>http:///signon/1.0</Type>
      <URI>http://www./openid/server.bml</URI>      <openid:Delegate>http://www./users/frank/</openid:Delegate>
    </Service>
    <Service priority="20">
      <Type>http://lid./sso/2.0</Type>
      <URI>http:///liddemouser</URI>
    </Service>
  </XRD>
</xrds:XRDS>

<link rel="openid2.provider" href="http:///server/endpoint/url"/>

<link rel="openid2.local_id" href="http:///server/endpoint/url"/>

<Service xmlns="xri://$xrd*($v*2.0)">
  <Type>http://specs./auth/2.0/signon</Type>
  <URI>https://www./endpoint/</URI>
  <LocalID>https://exampleuser./</LocalID>
</Service>

/**
 * Sample Consumer (Relying Party) implementation.
 */
public class SampleConsumer
{
    public ConsumerManager manager;

    public SampleConsumer() throws ConsumerException
    {
        // instantiate a ConsumerManager object
        manager = new ConsumerManager();
    }

    ...
}

// discover the OpenID authentication server‘s endpoint URL
List discoveries = manager.discover(userSuppliedOpenID);

// attempt to associate with the OpenID provider
// and retrieve one service endpoint for authentication
DiscoveryInformation discovered = manager.associate(discoveries);

// store the discovery information in the user‘s session for later use
session.setAttribute("discovered", discovered);

// define the return path
String returnURL = "http:///openidresponse.jsp";

// generate an AuthRequest message to be sent to the OpenID provider
AuthRequest authReq = manager.authenticate(discovered, returnURL);

// redirect the user to their provider for authentication
httpResp.sendRedirect(authReq.getDestinationUrl(true));

// extract the parameters from the authentication response
// (which comes in as a HTTP request from the OpenID provider)
ParameterList openidResp = new ParameterList(request.getParameterMap());

// retrieve the previously stored discovery information
DiscoveryInformation discovered = (DiscoveryInformation) session.getAttribute("discovered");

// extract the receiving URL from the HTTP request
StringBuffer receivingURL = request.getRequestURL();
String queryString = request.getQueryString();

if (queryString != null && queryString.length() > 0)
   receivingURL.append("?").append(request.getQueryString());

// verify the response
VerificationResult verification = manager.verify(receivingURL.toString(), openidResp, discovered);

// examine the verification result and extract the verified identifier
Identifier verified = verification.getVerifiedId();

if (verified != null)
    // success, use the verified identifier to identify the user
else
// OpenID authentication failed