[Solved] [GitHub Bug #907] OpenID broken for months
x00
MVP
Even on this site.
I want to draw attention to GitHub Bug #907
Many of us are reliant on openid, this seem to be a conflict with recent authentication code.
It is not to do with the lightopenid code as far as I cans see. I have used the existing version and the curl version and they both validate (some minor changes are need for shared hosting but that is expected).
I wonder if it is to do with the postback.
I want to draw attention to GitHub Bug #907
Many of us are reliant on openid, this seem to be a conflict with recent authentication code.
It is not to do with the lightopenid code as far as I cans see. I have used the existing version and the curl version and they both validate (some minor changes are need for shared hosting but that is expected).
I wonder if it is to do with the postback.
Tagged:
0
Answers
I recommended in the next update that you use the curl version of LightOpenID, there is no good reason to use f* based transfers. There is a little modification that makes is shared hosting friendly.
I think the twitter, or another authenticator used curl for everything except to get the credentials, bit of a waste.
Once openid is validated. It needs to be carried over the various stages. Otherwise you end up going round in circles, it can't be validated twice.