ZF-12258: Zend_OpenId_Consumer incorect verify on openid_claimed_id

Issue Type:
Bug
Created:
2012-05-28T16:23:18.000+0000
Last Updated:
2012-05-28T16:36:53.000+0000
Status:
Open
Fix version(s):
    Reporter:
    Lucian MATEESCU (lucianmateescu)
    Assignee:
    Dmitry Stogov (dmitry)
    Tags:
    • Zend_OpenId
    Related issues:
    Attachments:

    Description

    yahoo send an #fragment for identifier reciclying see http://developer.yahoo.com/openid/faq.html

    on line 316 if ((!empty($params['openid_identity']) && $params["openid_identity"] != $id)

    it will fail, and not according to the specs.

    AS http://openid.net/specs/…

    <>

    Comments

    Posted by Lucian MATEESCU (lucianmateescu) on 2012-05-28T16:36:53.000+0000

    Proposed solution :

    1. Revert http://framework.zend.com/issues/browse/ZF-4358 on Zend_OpenId normalize (and use as standard Normalized, without fragment http://openid.net/specs/… )

    2. Modify on Zend_OpenId_Consumer as 316 if ((!empty($params['openid_identity']) && $params["openid_identity"] != $id

    replace 316 if ((!empty($params['openid_identity']) && $params["openid_identity"] != Zend_OpenId:normalize($id)