Issues

ZF-4310: OpenId check_immediate shouldn't return cancel

Issue Type: Bug Created: 2008-09-16T10:44:21.000+0000 Last Updated: 2008-11-13T14:10:20.000+0000 Status: Resolved Fix version(s): - 1.7.0 (17/Nov/08)

Reporter: David Mzareulyan (david_m) Assignee: Dmitry Stogov (dmitry) Tags: - Zend_OpenId

Related issues: Attachments:

Description

In continue of issue ZF-3348

Zend_OpenId_Provider returns "openid.mode=cancel" in check_immediate mode (protocol version 1.1). But OpenID 1.1 specification says (par. 4.2.2.1.) that "openid.mode" must be always equal "id_res" in check_immediate mode, regardless of positive or negative response. For all awailable for me OpenID 1.1 consumers "cancel" response immediately breaks auth process.

See http://openid.net/specs/… and http://openidenabled.com/resources/openid-test/… for tests.

Comments

Posted by Wil Sinclair (wil) on 2008-11-13T14:10:20.000+0000

Changing issues in preparation for the 1.7.0 release.

Have you found an issue?

See the Overview section for more details.

Copyright

© 2006-2016 by Zend, a Rogue Wave Company. Made with by awesome contributors.

This website is built using zend-expressive and it runs on PHP 7.

Contacts