Opened 17 years ago
Closed 17 years ago
#12 closed task (fixed)
verify openid.return_to verification against realm
| Reported by: | mpasternacki | Owned by: | mpasternacki |
|---|---|---|---|
| Priority: | major | Milestone: | |
| Component: | code | Version: | 1.0 portable |
| Keywords: | Cc: |
Description (last modified by )
When present, the "openid.return_to" URL MUST match the "openid.realm", or the OP MUST return an indirect error response (Indirect Error Responses).
Change History (4)
comment:1 Changed 17 years ago by
| Description: | modified (diff) |
|---|---|
| Status: | new → assigned |
comment:2 Changed 17 years ago by
| Summary: | openid.return_to verification based on realm, relying party discovery → verify openid.return_to verification against realm |
|---|
summary update
comment:3 Changed 17 years ago by
| Milestone: | HTTP client portability |
|---|---|
| Version: | 0.5 nonportable → 1.0 portable |
Note: See
TracTickets for help on using
tickets.

RP discovery opened as a new bug, leave only return_to matching against the realm here.