[Openid-specs-ab] Generating salt value in OpenID Connect SessionMangement

[Nat Sakimura]

Which section are you talking about? 

Nat

From: Hasanthi Purnima Dissanayake 
Sent: Tuesday, May 26, 2015 12:24 PM
To: openid-specs-ab at lists.openid.net 
Subject: [Openid-specs-ab] Generating salt value in OpenID Connect SessionMangement
Hi team,

I'm working with spec [1] and according to the it the OP iframe is generating a salt value by splitting the session_state value that sent by the RP iframe. So we should send a salt value from RP to OP. So what I'm going to do is sending the mes variable from RP to OP with following format as ;

var mes = CryptoJS.SHA256(client_id + origin + opss + salt) + "." + salt;instead of   var mes = client_id + " " + session_state; which is mentioned in the spec.Please advice me on this.Thanks and Regards,

Hasanthi Dissanayake


Software Engineer | WSO2

E: mailto:niroshika at wso2.com


M :0718407133| http://wso2.com 



--------------------------------------------------------------------------------
_______________________________________________
Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net
http://lists.openid.net/mailman/listinfo/openid-specs-ab
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150604/f96d83f8/attachment.html>