[OpenID] Yahoo issue

Shane B Weeden sweeden at au1.ibm.com
Mon Feb 4 03:58:13 UTC 2008


In case anyone from Yahoo is on the list, I have encountered a problem 
with the associate method implementation. 

If an associate request is sent with the HMAC-SHA256 association type and 
DH-SHA256 session type, the Yahoo OP (at 
https://open.login.yahooapis.com/openid/op/auth) is returning the 
following response:

ns:http://specs.openid.net/auth/2.0
mode:error
error:assoc_type not supported
error_code:unsupported-type
session_type:HMAC-SHA1
assoc_type:no-encryption


I think you'll find the values for the assoc_type and session_type should 
be swapped.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080204/423b7b1f/attachment-0002.htm>


More information about the general mailing list