[OpenID] Interoperability problem with OpenID POST response between myopenid and Google

André Cruz andre.cruz at co.sapo.pt
Mon Jun 1 15:18:44 UTC 2009


Great suite of tests, Andrew.

On Jun 1, 2009, at 14:41 , Andrew Arnott wrote:

> Although I've not been able to reproduce the problem yet, I did add  
> a few POST interop tests to the OSIS site.  Can you test against  
> that and if you can repro it give me instructions to do so?
> RP accepts POST assertion

Google/Blogger comments FAIL.

You can try to post a comment http://ljsapo.blogspot.com/2007/02/teste-para-tags.html#comments
Choose openid, fill captcha, result: Your OpenID credentials could not  
be verified.


SourceForge login FAIL

https://sourceforge.net/account/login.php

Error: Could not verify your OpenID. Please try again.


Plaxo OK

https://www.plaxo.com/openid?r=%2Fevents


> OP accepts POSTed authentication requests

myopenid OK


> OP sends large assertions as POST

myopenid OK

Can you make one that exercises the UTF-8 encoding of attributes (SREG  
and AX)? Both in the OP (to check the signature generated) and in the  
RP (to check the signature verification).

Thanks,
André

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090601/209b436c/attachment.htm>


More information about the general mailing list