sweis / step2

Combine the OpenID authentication and the OAuth authorization protocols
0 stars 0 forks source link

problematic openid.realm with port number #9

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
you guys probably have tested the project with localhost:8080 only :-)

when i run step2 in port 80 under my domain name, e.g. http://mydomain.com.
The LoginServlet will generate a realm as mydomain.com:80, and it will
cause a VerificationException 

com.google.step2.VerificationException: 0x0: something went wrong during
response verification, such as nonce or signature checking. Check your
debug logs. verification.opSetupUrl: null, verification.authResponse:
org.openid4java.message.AuthSuccess@da2af3

In LoginServlet, by commenting the port at line 89, i.e. always use port 80
    //realm.append(":").append(req.getServerPort());
it will work.

the line should probably be rewritten as:
if (req.getServerPort()!=80) realm.append(":").append(req.getServerPort());

Original issue reported on code.google.com by mingfai...@gmail.com on 9 Feb 2009 at 7:46

GoogleCodeExporter commented 9 years ago

Original comment by breno.de...@gmail.com on 10 Feb 2009 at 4:57