<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Markus,<br>
<br>
Nat's response is correct. Yahoo appends a fragment to the OpenID url
as a generation identifier to be used to distinguish between two
different users if the OpenID is recycled. You must use the entire
OpenID url, including the fragment, to identify the user.<br>
<br>
Currently, only the me.yahoo.com Yahoo OpenIDs can be be recycled. The
Flickr OpenIDs are not recyclable, and do not have fragments.<br>
<br>
Allen<br>
<br>
<br>
<br>
Nat Sakimura wrote:
<blockquote
cite="mid:bf26e2340802290908t1c44e22ah3ec95907b3d2cc29@mail.gmail.com"
type="cite">
<pre wrap="">Read 11.5.1. Identifier Recycling.
The fragment is this.
The full URL with the fragment part constitutes the Claimed Identifier
in positive assertions and you must not strip it off. You have to
distinguish between the claimed identifier in authentication request
and the claimed identifier in the positive assertion. The
normalization is for the claimed identifier in authentication request.
=nat
2008/2/29, Markus Lanthaler <a class="moz-txt-link-rfc2396E" href="mailto:markus@silverstripe.com"><markus@silverstripe.com></a>:
</pre>
<blockquote type="cite">
<pre wrap="">Hey all,
I just tested the new Yahoo OpenIDs. It seems that they are appending to all
their some ID, e.g. <a class="moz-txt-link-freetext" href="https://me.yahoo.com/markus.lanthaler">https://me.yahoo.com/markus.lanthaler</a> gets
<a class="moz-txt-link-freetext" href="https://me.yahoo.com/markus.lanthaler#a5b3f">https://me.yahoo.com/markus.lanthaler#a5b3f</a>. The problem I have is that I
don't know for what reason that fragment is appended and if I should strip
it before saving the URL (as it is stated in the spec:
<a class="moz-txt-link-freetext" href="http://openid.net/specs/openid-authentication-2_0.html#normalization">http://openid.net/specs/openid-authentication-2_0.html#normalization</a>).
That fragment is never shown to the user so it's difficult for an
administrator to set the OpenIDs for all the users if they cannot tell him
their full URL.
Any ideas why they do it that way? Any suggestions how I should handle them?
Thanks,
Markus
_______________________________________________
general mailing list
<a class="moz-txt-link-abbreviated" href="mailto:general@openid.net">general@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
</blockquote>
<br>
</body>
</html>