Open GoogleCodeExporter opened 8 years ago
OK, never mind, it happens because I was using the Back button.
But I discovered the real reason why it was occurring intermittently on my
website. I started out from "http://example.com" while my return-URL was
"http://www.example.com", so that on the return the session could not be found,
and the null HMAC was triggering the exception.
EXCEPT when the session COULD be found on the "www.example.com" from an earlier
attempt, causing the intermittentness that kept me up till 5 this morning
Original comment by hai.phan
on 27 Feb 2012 at 6:01
It seems the best thing to do is set:
Realm = "*.example.com"
Return-URL = HttpServletRequest.getRequestURL()
Original comment by hai.phan
on 27 Feb 2012 at 6:30
Right, it has been specified in Main.java that "realm" and "return to" must be
set.
Original comment by rpriyank...@gmail.com
on 21 Aug 2012 at 9:58
Original issue reported on code.google.com by
hai.phan
on 27 Feb 2012 at 1:16