Bundled openid4java.jar cannot authenticate against Google as an OpenID provider
--------------------------------------------------------------------------------
Key: JBSEAM-4515
URL:
https://jira.jboss.org/jira/browse/JBSEAM-4515
Project: Seam
Issue Type: Bug
Components: Security
Affects Versions: 2.2.0.GA
Environment: Mac OS X 10.6.2, JBoss AS 4.2.3.GA
Reporter: Emmanuel Rousselle
The bundled openid4java.jar (version: 0.9.4.339) has a bug when authenticating against
Google as an OpenID provider. The authentication will fail with the following error
message in the Seam logs:
{code}
14:52:21,877 INFO [Discovery] Starting discovery on URL identifier:
https://www.google.com/accounts/o8/id?id=<information removed>
14:52:22,152 WARN [Discovery] Yadis discovery failed on
https://www.google.com/accounts/o8/id?id=<information removed> : 1806: XRDS stream
exceeds max allowed size: 100000
14:52:22,152 INFO [Discovery] No OpenID service endpoints discovered through Yadis;
attempting HTML discovery...
{code}
Upgrading to openid4java.jar version 0.9.5.593 fixes the issue. The Seam distribution
should be upgraded with openid4java.jar version 0.9.5.593 or later.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira