search

anunnakian / openid4java

Automatically exported from code.google.com/p/openid4java
Apache License 2.0
0 stars 0 forks source link

AssociationResponse.getAssociation() returns wrong Association type #8

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
When association type is HMAC-SHA1, Association.createHmacSha256 is called.
For HMAC-SHA256, createHmacSha1 is called.

Net effect of this bug is that smart-mode sig verification will always fail.

Fix: reverse the calls to createHmacShaXXX.

Question: what is the status of openid4java code? The reason I ask is that
I am using openid4java to shake the bugs out of my openid server but, so
far, it's been like watching two drunks (openid4java and my code) trying to
get home. LOL.

Original issue reported on code.google.com by super...@gmail.com on 14 Jan 2007 at 10:43

GoogleCodeExporter commented 9 years ago 
Fixed now in rev 76.

Original comment by johnny%s...@gtempaccount.com on 22 Jan 2007 at 2:33

GoogleCodeExporter commented 9 years ago 
Don, regarding the status of openid4java: it supports the recently released 
OpenID Authentication 2.0 draft 11.

If you have discovered other issues using the library, we look forward to 
hearing about them - in here or on the google group.

Thanks for using openid4java!
Johnny

Original comment by johnny%s...@gtempaccount.com on 22 Jan 2007 at 2:38

GoogleCodeExporter commented 9 years ago

Original comment by Johnny.B...@gmail.com on 22 Jan 2007 at 4:27