Closed GoogleCodeExporter closed 9 years ago
Unsolicited responses are only supported in 2.0.
1.x doesn't have server nonces, so consumer nonces are required for preventing
replay attacks.
Fixed in r683 to not NPE and just fail consumer nonce verification if nonce is
missing.
Original comment by Johnny.B...@gmail.com
on 31 Oct 2012 at 7:47
Original issue reported on code.google.com by
seldor.s...@gmail.com
on 26 Oct 2011 at 6:26