Problems calculating signature

[Josh Hoyt]

On 9/5/06, Thom McGrath <lists at thezaz.com> wrote:
> Lastly, judging from the responses, does nobody notice anything wrong
> with the code I provided?

I bet it's the replacing "_" characters in the keys with "." There are
some keys that mix both characters, like "openid.assoc_handle" and
"openid.return_to". It's a pain to get it right in PHP. Print out the
KVForm string and make sure that ALL "." and "_" characters are
correct in all the keys.

I'm being snarky, but I'd say that what you did wrong is try to
re-implement something that's been implemented, tested, licensed, and
packaged specifically *so you don't have to.* I understand the urge to
do things yourself, but I'd much rather see the cool apps that you had
time and energy to implement with OpenID because you already had a
library to do the annoying protocol bits for you.

I shouldn't single you out, because there have been other needless
re-implementations. If there's a need that a library doesn't address,
please make it known! We (JanRain) want to save people the grunt work.
And I'm not against alternate implementations *if there's a reason.*
If you love the protocol bits, we love patches! We hope to get more
community involvement in library implementation in the future.

Josh