ZF-3348: OpenId check_immediate without log in shouldn't return cancel

Issue Type: Bug Created: 2008-05-29T04:29:23.000+0000 Last Updated: 2008-09-02T10:39:34.000+0000 Status: Resolved Fix version(s): - 1.6.0 (02/Sep/08)

Reporter: Marko Gräßlin (marko_ekaabo) Assignee: Dmitry Stogov (dmitry) Tags: - Zend_OpenId

Related issues: Attachments:


OpenId check_Immediate with logged out User returns "openid.mode cancel" instead "openid.mode setup_needed" . The dump of the validator on… returns:

  Redirecting to <a rel="nofollow" href="">;</a>
  openid.identity   <a rel="nofollow" href=""></a>
  openid.mode   checkid_immediate
  openid.return_to  <a rel="nofollow" href="">;</a>
  openid.trust_root <a rel="nofollow" href="">;</a>
  Response received:
  action    response
  attempt   1
  nonce YW7sK1df
  openid.mode   cancel
  openid.user_setup_url <a rel="nofollow" href="">;</a>
* Operation Cancelled.


Posted by Wil Sinclair (wil) on 2008-06-01T12:56:28.000+0000

Please assign and categorize as necessary. I've preliminarily targeted a release.

Posted by Dmitry Stogov (dmitry) on 2008-07-15T10:01:25.000+0000

Fixed only for OpenID 2.0, because OpenID 1.1 specification says nothing about "setup_needed" response.

Posted by Wil Sinclair (wil) on 2008-09-02T10:39:34.000+0000

Updating for the 1.6.0 release.

Have you found an issue?

See the Overview section for more details.


© 2006-2016 by Zend, a Rogue Wave Company. Made with by awesome contributors.

This website is built using zend-expressive and it runs on PHP 7.