[Code] Python library only supports assertions sent as GET (not POST)

Suzanne scramsey at cox.net
Wed Oct 26 17:23:37 UTC 2011


SPAMM YOU HAVE BEEN REPORTED TO THE SEC AND FCC AND FISA, AS I HAVE PUT YOU IN MY JUNK MAIL, AND YOU ARE HACKING BACK IN.

THIS IS A THIRD DEGREE FELONY!  unsubscribe now!
From: Jack Bates 
Sent: Wednesday, October 26, 2011 12:51 PM
To: openid-code at lists.openid.net 
Subject: Re: [Code] Python library only supports assertions sent as GET (not POST)

I think this is an important issue because many sites employ the Python
library, e.g. bitbucket.org

As a result of this issue, some users cannot log in to these sites with OpenID,
and only a general error explains why not

I think this issue hurts OpenID adoption because some users get an unreliable
experience (some users cannot log in to some sites with OpenID). I think it
also hurts adoption because site developers have an unreliable experience:
There's an interoperability problem between a popular library and some
conformant OpenID providers

If there are no objections to the change introduced in this pull request, is
anyone on this list able to accept it?

If there are any objections to the change introduced in this pull request, I am
happy to help address them!

On Thu, Oct 20, 2011 at 11:36:43AM -0700, Jack Bates wrote:
> According to OpenID specification, indirect messages can be sent as a GET or as
> a POST. However the Python library doesn't support assertions which are sent as
> a POST - it only supports assertions which are sent as a GET. Consequently the
> Python library fails to interoperate with some OpenID providers which
> nonetheless conform to the OpenID specification
> 
> I opened this pull request to address this issue:
> https://github.com/openid/python-openid/pull/25
> _______________________________________________
> Code mailing list
> Code at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-code
_______________________________________________
Code mailing list
Code at lists.openid.net
http://lists.openid.net/mailman/listinfo/openid-code

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-code/attachments/20111026/ab6d5a35/attachment.html>


More information about the Code mailing list