Skip Menu |

This queue is for tickets about the Net-OpenID-Server CPAN distribution.

Report information
The Basics
Id: 42664
Status: open
Priority: 0/
Queue: Net-OpenID-Server

People
Owner: Nobody in particular
Requestors: hsw [...] rambler.ru
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: 1.02
Fixed in: (no value)



Subject: OpenID v1 backward compatibility for "checkid_immediate" negative response
Enable OpenID v1 backward compatibility for checkid_immediate negative response. OpenID v2.0 spec 14.2.2. OpenID Providers: "When responding with a negative assertion to a "checkid_immediate" mode authentication request, the "user_setup_url" parameter MUST be returned." Net::OpenID::Consumer v1.03 not work w/o "setup_url".
Subject: Server.pm.patch
--- Server.pm.1 2009-01-22 14:19:23.000000000 +0300 +++ Server.pm 2009-01-22 14:19:31.000000000 +0300 @@ -372,6 +372,7 @@ if ($self->args('openid.ns') eq $OPENID2_NS) { _push_url_arg(\$ret_url, "openid.ns", $self->args('openid.ns')); _push_url_arg(\$ret_url, "openid.mode", "setup_needed"); + _push_url_arg(\$ret_url, "openid.user_setup_url", $setup_url); } else { _push_url_arg(\$ret_url, "openid.mode", "id_res"); _push_url_arg(\$ret_url, "openid.user_setup_url", $setup_url);
Thanks for taking the time to report this bug. We actually have a fix in the version control repository that's not yet been put into a release, since I was looking for feedback from the OpenID community on whether this is correct behavior. However, it seems that without it many RPs fail so it needs to go in whether it's correct or not. I'll try to get a release out soon.
Martin, do you have any estimates on this? Thanks! Чтв. Янв. 22 14:07:14 2009, MART писал: Show quoted text
> Thanks for taking the time to report this bug. > > We actually have a fix in the version control repository that's not yet > been put into a release, since I was looking for feedback from the > OpenID community on whether this is correct behavior. However, it seems > that without it many RPs fail so it needs to go in whether it's correct > or not. > > I'll try to get a release out soon.