[OpenID] wiki.openid.net openid support broken

Johannes Ernst jernst+openid.net at netmesh.us
Wed Oct 21 04:05:46 UTC 2009


There is also the issue of your trailing slashes in the link element.  
Some parsers don't quite grok those, particularly when used without a  
blank before the slash.

(One issue I have been burned with in the past, I forgot which OP).

On Oct 20, 2009, at 20:57, Andrew Arnott wrote:

> Wow, that's a great review, James.
>
> I am convinced that it's Allen's 1.1 endpoint HTML elements whereas  
> I have 2.0 elements.  In OpenID 1.1, delegation is entirely managed  
> by the RP rather than a concert between RP and OP the way it is in  
> 2.0, so delegation was simpler in 1.1 and easier to get right IMO.
> --
> Andrew Arnott
> "I [may] not agree with what you have to say, but I'll defend to the  
> death your right to say it." - S. G. Tallentyre
>
>
> On Tue, Oct 20, 2009 at 8:46 PM, Manger, James H <James.H.Manger at team.telstra.com 
> > wrote:
> http://blog.nerdbank.net/ claims to be XHTML but isn’t valid XML.  
> That could be a problem, though http://allentom.com/ also claims to  
> be XHTML but also isn’t valid. They both have lots of unescaped ‘&’  
> characters so that doesn’t explain the difference, but other XML  
> errors are only in one or the other so that could cause different  
> behaviour.
>
> The <meta http-equiv=’X-XRDS-Location’ content=’https://xri…’>  
> element in http://blog.nerdbank.net/ (without a corresponding HTTP  
> header) may be a more significant difference. Are RPs supposed to  
> notice such a <meta> element?
>
> Other minor differences: ‘ vs “ to quote OpenID <link> attributes; / 
> > vs > to terminate <link> elements; empty path vs / path on  
> delegate URIs.
>
> A more significant difference is that http://blog.nerdbank.net/  
> includes OpenID v1 and v2 links, while http://allentom.com/ only has  
> v1 links.
>
>
> I am curious about what the actual cause turns out to be.
>
>
>
> James Manger
> James.H.Manger at team.telstra.com
> Identity and security team — Chief Technology Office — Telstra
>
>
> From: openid-general-bounces at lists.openid.net [mailto:openid-general- 
> bounces at lists.openid.net] On Behalf Of Allen Tom
> Sent: Wednesday, 21 October 2009 2:09 PM
> To: Andrew Arnott
> Cc: general
> Subject: Re: [OpenID] wiki.openid.net openid support broken
>
>
> I also delegated my domain to myopenid.com, but I'm able to login to  
> the Wiki using "allentom.com" which has been delegated to "http://atom.myopenid.com/ 
> "
>
> YMMV
> Allen
>
>
> Andrew Arnott wrote:
>
> This is what I sent to pbworks via their contact page:
>
>
> The OpenID login that you have doesn't correctly handle delegation.  
> When I try to log in with http://blog.nerdbank.net/ it sends me to myopenid.com 
>  with an openid.identity value of http://blog.nerdbank.net/ instead  
> of the correct value of http://andrew.arnott.myopenid.com/ This  
> makes it impossible for me to login. Please fix this asap.
>
>
>
>
>
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20091020/3e919441/attachment.htm>


More information about the general mailing list