search

TheBeruriahIncident / openid4java

Automatically exported from code.google.com/p/openid4java
Apache License 2.0
0 stars 0 forks source link

Stateless Mode Fails with non-ASCII Attributes #201

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
1. Set up openid4java as the OP
2. Set up an RP to run in stateless mode
3. Process a request and return at least one attribute with non-ASCII encoding
4. RP should send a check_authentication request to the OP
5. Authentication is not verified by openid4java

When performing the above with ASCII attributes, the verification succeeds.  
RP's capable of associations also seem to process non-ASCII attributes 
correctly.  I have reproduced this with using SREG attributes, but I am not 
sure if this applies to AX attributes as well.

I am using 0.9.8 on Linux and JBoss 7.  I can reproduce the issue regardless of 
URI encoding settings in the JBoss configuration.

Original issue reported on code.google.com by MattE...@gmail.com on 1 Nov 2013 at 4:32