search

havard / node-openid

OpenID for Node.js
MIT License
293 stars 100 forks source link

Reuse cached associations #112

Open codeaholics opened 10 years ago

codeaholics commented 10 years ago

Associations are used to agree a shared secret between the RP and the OP. Right now, node-openid stores association information at the end of a successful association with an OP, but it only ever re-uses that information to validate positive assertions. It should also re-use those associations on subsequent authentication requests to the same OP.

havard commented 10 years ago

You are of course right, this is one of the lacking parts of the library.

Patches are welcome, as always. :)