[OpenID] CheckIDRequest with Big AX

[Pat Cappelaere]

Larry,

I really think this is a bad assumption as the SP may try to get  
access to the Attributes with no user present.
In my case, this requires the user to hit a "Continue" button on a  
blank page.  It does not happen automatically and is, at best,  
confusing.  It took me a while to figure out what was happening.

I do think that this ought to be fixed somehow either way.  Why  
couldn't the server do a direct post rather than go through the  
intermediary of a form?  I must be missing something.
Thanks,
Pat.


On Dec 30, 2008, at 6:19 AM, larry drebes wrote:

> Hi Pat,
> The normal behavior for an OP is to assume the user is in the loop.   
> With javascript enabled the form POST submit should happen  
> automatically, for the vast majority of time this is not pestering  
> the user.
> larry-
>
> On Mon, Dec 29, 2008 at 7:46 PM, Pat Cappelaere <pat at cappelaere.com>  
> wrote:
> I have an interesting problem.
>
> I am trying to make a CheckIDRequest along with a few experimental AX.
> Problem is that my attributes are fairly large and could overflow the
> GET.
> The Janrain Ruby library detects that and turns the response into a
> secondary form.  A user has to hit continue for the form to do a
> post.  This is fine if there is a user in the loop (although confusing
> at best) but this is not my case.  I do not have a user in the loop.
> I am really trying to authenticate an application consumer that
> happens to have an openid and trying to get its pubic key in order to
> do the OAuth dance using AX... cool stuff...
>
> My questions are:
>
> Is this the normal behavior of an OP?
>
> Should I try to patch the server library to return a directPOST?
>
> Or get my consumer to break down the request in two parts?  I am not
> quite sure how the second part would look like though...
>
> Any suggestions?
>
> Thanks,
>
> Pat.
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081230/b5d224cf/attachment-0002.htm>