URL redirection truncation problems

Manuel Lemos mlemos at acm.org
Tue Dec 7 00:41:24 UTC 2010


Hello,

I have developed my implementation of OpenID (consumer and provider). In 
general works well and it has been used in sites use that authenticate 
hundreds of thousands of users.

The problem is that once in a while I get warnings from my system 
regarding missing required attributes or invalided signatures.

Looking closer at the problem I realized that in some cases the OpenID 
provider redirects the users back to the consumer sites but the user 
browsers are truncating URLs apparently at 400 characters.

Anybody experienced this problem?

Admittedly I may have missed something in the spec documents, but is 
there anything in the specs that provides a solution to avoid 
redirecting browsers to such long URLs?

-- 

Regards,
Manuel Lemos

JS Classes - Free ready to use OOP components written in JavaScript
http://www.jsclasses.org/


More information about the specs mailing list