OpenID 1.1 Woes

Submitted by paul.lu81 on November 6, 2008 - 11:15am

Note to Self:

OpenID Providers conforming to the 1.1 protocols are failing for http://www.entitydescriber.org/openid, but not http://arch.uwindsor.ca/openidTest/openid. Why? Is it because http://www.entitydescriber.org is being used as the realm instead of http://www.entitydescriber.org/openid ???

Using latest build for OpenID from sxip's 'openID4Java' for bioMoby Jamboree Annotator. Blogspot OpenIDs are working again for OpenID login DESPITE being an OpenID 1.1 implementation.

LOGS:
Logging in with OpenID 1.1 Providers EXCEPT blogspot:
INFO [http-8080-5] (Discovery.java:130) - Starting discovery on URL identifier: http://plumonday.myid.net/ INFO [http-8080-5] (YadisResolver.java:216) - Yadis discovery succeeded on http://plumonday.myid.net/ INFO [http-8080-5] (Discovery.java:143) - Using Yadis normalized URL as claimedID: http://plumonday.myid.net/ INFO [http-8080-5] (Discovery.java:173) - Discovered 1 OpenID endpoints. INFO [http-8080-5] (ConsumerManager.java:720) - Trying to associate with http://server.myid.net/server attempts left: 4 WARN [http-8080-5] (ConsumerManager.java:907) - Could not create association of type: :HMAC-SHA1:OpenID1 INFO [http-8080-5] (ConsumerManager.java:817) - Associated with http://server.myid.net/server handle: 985b52d00d24a2c4 INFO [http-8080-5] (ConsumerManager.java:1076) - Creating authentication request for OP-endpoint: http://server.myid.net/server claimedID: http://plumonday.myid.net/ OP-specific ID: http://plumonday.myid.net/ INFO [http-8080-5] (ConsumerManager.java:1379) - Inserted consumer nonce: 2008-11-06T17:41:41Z0 INFO [http-8080-5] (RealmVerifier.java:274) - Return URL: http://www.entitydescriber.org/openid?openid.rpnonce=2008-11-06T17%3A41%... matches realm: http://www.entitydescriber.org/ AUTHREQUEST PARAMETERS openid.identity : http://plumonday.myid.net/ openid.return_to : http://www.entitydescriber.org/openid?openid.rpnonce=2008-11-06T17%3A41%... openid.trust_root : http://www.entitydescriber.org/ openid.assoc_handle : 985b52d00d24a2c4 openid.mode : checkid_setup INFO [http-8080-5] (ConsumerManager.java:1134) - Verifying authentication response... INFO [http-8080-5] (ConsumerManager.java:1158) - Received positive auth response. INFO [http-8080-5] (ConsumerManager.java:1560) - Proceeding with stateless mode / bare response verification... INFO [http-8080-5] (Discovery.java:130) - Starting discovery on URL identifier: http://plumonday.myid.net/ INFO [http-8080-5] (YadisResolver.java:216) - Yadis discovery succeeded on http://plumonday.myid.net/ INFO [http-8080-5] (Discovery.java:143) - Using Yadis normalized URL as claimedID: http://plumonday.myid.net/ INFO [http-8080-5] (Discovery.java:173) - Discovered 1 OpenID endpoints. ERROR [http-8080-5] (ConsumerManager.java:1602) - No service element found to match the identifier in the assertion. ERROR [http-8080-5] (ConsumerManager.java:1177) - Discovered information verification failed.

Logging in with OpenID 1.1 Provider: BLOGSPOT:
INFO [http-8080-5] (Discovery.java:130) - Starting discovery on URL identifier: http://eddevelop.blogspot.com/ WARN [http-8080-5] (Discovery.java:153) - Yadis discovery failed on http://eddevelop.blogspot.com/ : 0x708: A Yadis Resource Descriptor URL MUST be an absolute URL and it must be HTTP or HTTPS; found: null INFO [http-8080-5] (Discovery.java:160) - No OpenID service endpoints discovered through Yadis; attempting HTML discovery... INFO [http-8080-5] (HttpCache.java:140) - Returning cached GET response for http://eddevelop.blogspot.com/ INFO [http-8080-5] (HtmlResolver.java:122) - HTML discovery completed on: http://eddevelop.blogspot.com/ INFO [http-8080-5] (Discovery.java:173) - Discovered 1 OpenID endpoints. INFO [http-8080-5] (ConsumerManager.java:720) - Trying to associate with http://www.blogger.com/openid-server.g attempts left: 4 WARN [http-8080-5] (ConsumerManager.java:907) - Could not create association of type: :HMAC-SHA1:OpenID1 INFO [http-8080-5] (ConsumerManager.java:817) - Associated with http://www.blogger.com/openid-server.g handle: oida-1225993484787-2087179308 INFO [http-8080-5] (ConsumerManager.java:1076) - Creating authentication request for OP-endpoint: http://www.blogger.com/openid-server.g claimedID: http://eddevelop.blogspot.com/ OP-specific ID: http://eddevelop.blogspot.com/ INFO [http-8080-5] (ConsumerManager.java:1379) - Inserted consumer nonce: 2008-11-06T17:44:45Z0 INFO [http-8080-5] (RealmVerifier.java:274) - Return URL: http://www.entitydescriber.org/openid?openid.rpnonce=2008-11-06T17%3A44%... matches realm: http://www.entitydescriber.org/ AUTHREQUEST PARAMETERS openid.identity : http://eddevelop.blogspot.com/ openid.return_to : http://www.entitydescriber.org/openid?openid.rpnonce=2008-11-06T17%3A44%... openid.trust_root : http://www.entitydescriber.org/ openid.assoc_handle : oida-1225993484787-2087179308 openid.mode : checkid_setup INFO [http-8080-5] (ConsumerManager.java:1134) - Verifying authentication response... INFO [http-8080-5] (ConsumerManager.java:1158) - Received positive auth response. INFO [http-8080-5] (ConsumerManager.java:1560) - Proceeding with stateless mode / bare response verification... INFO [http-8080-5] (Discovery.java:130) - Starting discovery on URL identifier: http://eddevelop.blogspot.com/ WARN [http-8080-5] (Discovery.java:153) - Yadis discovery failed on http://eddevelop.blogspot.com/ : 0x708: A Yadis Resource Descriptor URL MUST be an absolute URL and it must be HTTP or HTTPS; found: null INFO [http-8080-5] (Discovery.java:160) - No OpenID service endpoints discovered through Yadis; attempting HTML discovery... INFO [http-8080-5] (HttpCache.java:140) - Returning cached GET response for http://eddevelop.blogspot.com/ INFO [http-8080-5] (HtmlResolver.java:122) - HTML discovery completed on: http://eddevelop.blogspot.com/ INFO [http-8080-5] (Discovery.java:173) - Discovered 1 OpenID endpoints. INFO [http-8080-5] (ConsumerManager.java:1463) - Consumer nonce signature verified. INFO [http-8080-5] (ConsumerManager.java:1765) - Found association: oida-1225993484787-2087179308 verifying signature locally... INFO [http-8080-5] (ConsumerManager.java:1833) - Verification succeeded for: http://eddevelop.blogspot.com/

The Difference???

Other OpenID 1.1 Providers:
INFO [http-8080-5] (ConsumerManager.java:1134) - Verifying authentication response... INFO [http-8080-5] (ConsumerManager.java:1158) - Received positive auth response. INFO [http-8080-5] (ConsumerManager.java:1560) - Proceeding with stateless mode / bare response verification... INFO [http-8080-5] (Discovery.java:130) - Starting discovery on URL identifier: http://plumonday.myid.net/ INFO [http-8080-5] (YadisResolver.java:216) - Yadis discovery succeeded on http://plumonday.myid.net/ INFO [http-8080-5] (Discovery.java:143) - Using Yadis normalized URL as claimedID: http://plumonday.myid.net/ INFO [http-8080-5] (Discovery.java:173) - Discovered 1 OpenID endpoints. ERROR [http-8080-5] (ConsumerManager.java:1602) - No service element found to match the identifier in the assertion. ERROR [http-8080-5] (ConsumerManager.java:1177) - Discovered information verification failed.
BLOGSPOT
INFO [http-8080-5] (ConsumerManager.java:1134) - Verifying authentication response... INFO [http-8080-5] (ConsumerManager.java:1158) - Received positive auth response. INFO [http-8080-5] (ConsumerManager.java:1560) - Proceeding with stateless mode / bare response verification... INFO [http-8080-5] (Discovery.java:130) - Starting discovery on URL identifier: http://eddevelop.blogspot.com/ WARN [http-8080-5] (Discovery.java:153) - Yadis discovery failed on http://eddevelop.blogspot.com/ : 0x708: A Yadis Resource Descriptor URL MUST be an absolute URL and it must be HTTP or HTTPS; found: null INFO [http-8080-5] (Discovery.java:160) - No OpenID service endpoints discovered through Yadis; attempting HTML discovery... INFO [http-8080-5] (HttpCache.java:140) - Returning cached GET response for http://eddevelop.blogspot.com/ INFO [http-8080-5] (HtmlResolver.java:122) - HTML discovery completed on: http://eddevelop.blogspot.com/ INFO [http-8080-5] (Discovery.java:173) - Discovered 1 OpenID endpoints. INFO [http-8080-5] (ConsumerManager.java:1463) - Consumer nonce signature verified. INFO [http-8080-5] (ConsumerManager.java:1765) - Found association: oida-1225993484787-2087179308 verifying signature locally... INFO [http-8080-5] (ConsumerManager.java:1833) - Verification succeeded for: http://eddevelop.blogspot.com/

From what I understand Yadis is only used in 2.0 implementations. So why am I discovering Yadis in OpenID 1.1 Providers???

Logs from arch.uwindsor.ca/openidTest/openid with latest openid4java PUBLIC build version: 0.9.4.339. (older than the one used for www.entitydescriber)

BLOGSPOT:
6-Nov-2008 12:54:00 PM org.openid4java.discovery.Discovery discover INFO: Starting discovery on URL identifier: http://eddevelop.blogspot.com/ 6-Nov-2008 12:54:00 PM org.openid4java.discovery.Discovery discover WARNING: Yadis discovery failed on http://eddevelop.blogspot.com/ : 1800: A Yadis Resource Descriptor URL MUST be an absolute URL and it must be HTTP or HTTPS; found: null 6-Nov-2008 12:54:00 PM org.openid4java.discovery.Discovery discover INFO: No OpenID service endpoints discovered through Yadis; attempting HTML discovery... 6-Nov-2008 12:54:01 PM org.openid4java.discovery.html.HtmlResolver discover INFO: HTML discovery succeeded on: http://eddevelop.blogspot.com/ 6-Nov-2008 12:54:01 PM org.openid4java.discovery.Discovery discover INFO: Discovered 1 OpenID endpoints. 6-Nov-2008 12:54:01 PM org.openid4java.consumer.ConsumerManager associate INFO: Trying to associate with http://www.blogger.com/openid-server.g attempts left: 4 6-Nov-2008 12:54:01 PM org.openid4java.consumer.InMemoryConsumerAssociationStore removeExpired INFO: Removing expired association: oida-1225928293008--1700629048 with OP: http://www.blogger.com/openid-server.g 6-Nov-2008 12:54:01 PM org.openid4java.consumer.ConsumerManager createAssociationRequest WARNING: Could not create association of type: :HMAC-SHA1:OpenID1 6-Nov-2008 12:54:01 PM org.openid4java.consumer.ConsumerManager associate INFO: Associated with http://www.blogger.com/openid-server.g handle: oida-1225994041455--305889729 6-Nov-2008 12:54:01 PM org.openid4java.consumer.ConsumerManager associate INFO: Trying to associate with http://www.blogger.com/openid-server.g attempts left: 4 6-Nov-2008 12:54:01 PM org.openid4java.consumer.ConsumerManager associate INFO: Found an existing association. 6-Nov-2008 12:54:01 PM org.openid4java.consumer.ConsumerManager authenticate INFO: Creating authentication request for OP-endpoint: http://www.blogger.com/openid-server.g claimedID: http://eddevelop.blogspot.com/ OP-specific ID: http://eddevelop.blogspot.com/ 6-Nov-2008 12:54:01 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:01 PM org.openid4java.discovery.yadis.YadisResolver discover INFO: Yadis discovery succeeded on http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:01 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:01 PM org.openid4java.server.RealmVerifier validate INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid matched discovered RP endpoint: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:01 PM org.openid4java.consumer.ConsumerManager insertConsumerNonce INFO: Inserted consumer nonce. 6-Nov-2008 12:54:01 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid?openid.rpnonce=2008-11-06T17%3... matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:01 PM org.openid4java.discovery.yadis.YadisResolver discover INFO: Yadis discovery succeeded on http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:01 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid?openid.rpnonce=2008-11-06T17%3... matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:01 PM org.openid4java.server.RealmVerifier validate INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid?openid.rpnonce=2008-11-06T17%3... matched discovered RP endpoint: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:54:02 PM org.openid4java.consumer.ConsumerManager verify INFO: Verifying authentication response... 6-Nov-2008 12:54:02 PM org.openid4java.consumer.ConsumerManager verify INFO: Received positive auth response. 6-Nov-2008 12:54:02 PM org.openid4java.consumer.ConsumerManager extractConsumerNonce INFO: Consumer nonce signature verified. 6-Nov-2008 12:54:02 PM org.openid4java.consumer.ConsumerManager verifySignature INFO: Found association: oida-1225994041455--305889729 verifying signature locally... 6-Nov-2008 12:54:02 PM org.openid4java.consumer.ConsumerManager verifySignature INFO: Verification succeeded for: http://eddevelop.blogspot.com/

Other OpenID 1.1 Providers:
6-Nov-2008 12:57:29 PM org.openid4java.discovery.Discovery discover INFO: Starting discovery on URL identifier: http://plumonday.myid.net/ 6-Nov-2008 12:57:29 PM org.openid4java.discovery.yadis.YadisResolver discover INFO: Yadis discovery succeeded on http://plumonday.myid.net/ 6-Nov-2008 12:57:29 PM org.openid4java.discovery.Discovery discover INFO: Using Yadis normalized URL as claimedID: http://plumonday.myid.net/ 6-Nov-2008 12:57:29 PM org.openid4java.discovery.Discovery discover INFO: Discovered 1 OpenID endpoints. 6-Nov-2008 12:57:29 PM org.openid4java.consumer.ConsumerManager associate INFO: Trying to associate with http://server.myid.net/server attempts left: 4 6-Nov-2008 12:57:29 PM org.openid4java.consumer.ConsumerManager associate INFO: Found an existing association. 6-Nov-2008 12:57:29 PM org.openid4java.consumer.ConsumerManager associate WARNING: Association failed; using first entry: http://server.myid.net/server 6-Nov-2008 12:57:29 PM org.openid4java.consumer.ConsumerManager associate INFO: Trying to associate with http://server.myid.net/server attempts left: 4 6-Nov-2008 12:57:29 PM org.openid4java.consumer.ConsumerManager associate INFO: Found an existing association. 6-Nov-2008 12:57:29 PM org.openid4java.consumer.ConsumerManager authenticate INFO: Creating authentication request for OP-endpoint: http://server.myid.net/server claimedID: http://plumonday.myid.net/ OP-specific ID: http://plumonday.myid.net/ 6-Nov-2008 12:57:29 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:29 PM org.openid4java.discovery.yadis.YadisResolver discover INFO: Yadis discovery succeeded on http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:29 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:29 PM org.openid4java.server.RealmVerifier validate INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid matched discovered RP endpoint: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:29 PM org.openid4java.consumer.ConsumerManager insertConsumerNonce INFO: Inserted consumer nonce. 6-Nov-2008 12:57:29 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid?openid.rpnonce=2008-11-06T17%3... matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:29 PM org.openid4java.discovery.yadis.YadisResolver discover INFO: Yadis discovery succeeded on http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:29 PM org.openid4java.server.RealmVerifier match INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid?openid.rpnonce=2008-11-06T17%3... matches realm: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:29 PM org.openid4java.server.RealmVerifier validate INFO: Return URL: http://arch.uwindsor.ca/openidTest/openid?openid.rpnonce=2008-11-06T17%3... matched discovered RP endpoint: http://arch.uwindsor.ca/openidTest/openid 6-Nov-2008 12:57:41 PM org.openid4java.consumer.ConsumerManager verify INFO: Verifying authentication response... 6-Nov-2008 12:57:41 PM org.openid4java.consumer.ConsumerManager verify INFO: Received positive auth response. 6-Nov-2008 12:57:41 PM org.openid4java.consumer.ConsumerManager extractConsumerNonce INFO: Consumer nonce signature verified. 6-Nov-2008 12:57:41 PM org.openid4java.consumer.ConsumerManager verifySignature INFO: No association found, contacting the OP for direct verification... 6-Nov-2008 12:57:41 PM org.openid4java.consumer.ConsumerManager verifySignature INFO: Verification succeeded for: http://plumonday.myid.net/

paul.lu81's blog

User login

Book navigation

Recent blog posts

Navigation

OpenID 1.1 Woes