[OpenID] Interoperability problem with OpenID POST response between myopenid and Google

[John Bradley]

IRI with UTF16 characters are not officially supported by openID  
except in iNames.

It is an issue I have raised a number of times but has not gotten any  
traction.

I know the DotNetOpenAuth lib makes an attempt to support them via IRI  
support in the dotNet library.

When the parameters are form encoded they must be escaped differently.

Perhaps Andrew Arnott can help you.

PS if you are not using mono you probably want a different branch.

Regards
John B.


On 21-Jun-09, at 6:23 PM, general-request at openid.net wrote:

> Date: Mon, 22 Jun 2009 00:23:18 +0200
> From: "Sztup?k Sz. Zsolt" <mail at sztupy.hu>
> Subject: [OpenID] Interoperability problem with OpenID POST response
> 	between myopenid and Google
> To: general at openid.net
> Message-ID: <4A3EB2D6.8050905 at sztupy.hu>
> Content-Type: multipart/alternative;
> 	boundary="------------000107030101010004060809"
>
> This is a multi-part message in MIME format.
> --------------000107030101010004060809
> Content-Type: text/plain; charset=ISO-8859-2; format=flowed
> Content-Transfer-Encoding: quoted-printable
>
> Hi!
>
> Just created an RP using DotNetOpenAuth mono2 branch (but running  
> on=20
> MS.NET3.5), and I've got the "Login failed: *Message* *signature*  
> *was*=20
> *incorrect*." error message. I think I've tracked back the problems  
> to=20
> non-ASCII characters in the response string (my name contains  
> hungarian=20
> accented characters -> FAIL, if I remove them, then SUCCESS)
>
> I both request sreg (nick,email,fullname) and AX=20
> (nick,first,last,fullname,email) data from myopenid (if I only  
> request=20
> srge and/or ax then it works fine, but then it uses GET imho)
>
> Here is the log:
>     assoc_handle: {HMAC-SHA256}{4a3eae39}{WG9ITQ=3D=3D}
>     ax.count.alias1: 0
>     ax.count.alias2: 0
>     ax.count.alias3: 0
>     ax.count.alias4: 0
>     ax.count.alias5: 0
>     ax.mode: fetch_response
>     ax.type.alias1: http://axschema.org/contact/email
>     ax.type.alias2: http://axschema.org/namePerson/friendly
>     ax.type.alias3: http://axschema.org/namePerson
>     ax.type.alias4: http://axschema.org/namePerson/first
>     ax.type.alias5: http://axschema.org/namePerson/last
>     claimed_id: http://sztupy2k.myopenid.com/
>     identity: http://sztupy2k.myopenid.com/
>     mode: id_res
>     ns: http://specs.openid.net/auth/2.0
>     ns.ax: http://openid.net/srv/ax/1.0
>     ns.sreg: http://openid.net/extensions/sreg/1.1
>     op_endpoint: http://www.myopenid.com/server
>     response_nonce: 2009-06-21T22:03:51ZstfXvT
>     return_to:=20
> http://localhost:63995/OpenId/Authenticate?dnoi.userSuppliedIdentifier=3D=
> http%3a%2f%2fsztupy2k.myopenid.com%2f&dnoi.return_to_sig_handle=3D 
> %7b6338=
> 12185973476562%7d%7bMLzXHg%3d%3d%7d&dnoi.return_to_sig=3DANbgn54bDTG 
> %2f9c=
> igv0DIsV5LFBRuQTnoG45sqCY5Yv59HYh8gpluby8szbfqSileJ7Nlk5PfmW0DgF1 
> %2fxpAXY=
> w%3d%3d
>     signed:=20
> assoc_handle 
> ,ax.count.alias1,ax.count.alias2,ax.count.alias3,ax.count.ali=
> as4 
> ,ax 
> .count.alias5,ax.mode,ax.type.alias1,ax.type.alias2,ax.type.alias3,=
> ax 
> .type 
> .alias4,ax.type.alias5,claimed_id,identity,mode,ns,ns.ax,ns.sreg,o=
> p_endpoint 
> ,response_nonce,return_to,signed,sreg.email,sreg.fullname,sreg.=
> nickname
>     sreg.email: mail at sztupy.hu
>     sreg.fullname: Zsolt Sz. SztupA!k
>     sreg.nickname: SztupY