[JBoss JIRA] Created: (SEAMSECURITY-67) security-openid-rp/op examples fail with 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0 MUST be signed
3:23 p.m.
security-openid-rp/op examples fail with 0x100: Namespace declaration for extension
http://openid.net/srv/ax/1.0 MUST be signed
-------------------------------------------------------------------------------------------------------------------------------
Key: SEAMSECURITY-67
URL: https://issues.jboss.org/browse/SEAMSECURITY-67
Project: Seam Security
Issue Type: Bug
Environment: JBossAS 6.1.0-SNAPSHOT+Weld 1.1.1
Reporter: Marek Schmidt
Since the upgrade of OpenID4Java to 0.9.6 the openid example combo (security-openid-rp/op)
fails with
HTTP Status 400 - 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0
MUST be signed
The example seems to work fine if downgraded to 0.9.5
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:33 p.m.
New subject: [JBoss JIRA] Assigned: (SEAMSECURITY-67) security-openid-rp/op examples fail with 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0 MUST be signed
[
https://issues.jboss.org/browse/SEAMSECURITY-67?page=com.atlassian.jira.p...
]
Marek Schmidt reassigned SEAMSECURITY-67:
-----------------------------------------
Assignee: Shane Bryzak
security-openid-rp/op examples fail with 0x100: Namespace declaration
for extension http://openid.net/srv/ax/1.0 MUST be signed
-------------------------------------------------------------------------------------------------------------------------------
Key: SEAMSECURITY-67
URL: https://issues.jboss.org/browse/SEAMSECURITY-67
Project: Seam Security
Issue Type: Bug
Environment: JBossAS 6.1.0-SNAPSHOT+Weld 1.1.1
Reporter: Marek Schmidt
Assignee: Shane Bryzak
Since the upgrade of OpenID4Java to 0.9.6 the openid example combo
(security-openid-rp/op) fails with
HTTP Status 400 - 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0
MUST be signed
The example seems to work fine if downgraded to 0.9.5
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:18 p.m.
New subject: [JBoss JIRA] Updated: (SEAMSECURITY-67) security-openid-rp/op examples fail with 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0 MUST be signed
[
https://issues.jboss.org/browse/SEAMSECURITY-67?page=com.atlassian.jira.p...
]
Marek Schmidt updated SEAMSECURITY-67:
--------------------------------------
Fix Version/s: Future
Environment: JBossAS 6.1.0-SNAPSHOT+Weld 1.1.1, Seam Security 3.0.1-SNAPSHOT
(was: JBossAS 6.1.0-SNAPSHOT+Weld 1.1.1)
Steps to Reproduce:
0. add www.openid-op.com and www.openid-rp.com as hostnames for 127.0.0.1 in /etc/hosts
(as per readme files in the examples)
1. deploy the security-openid-rp and security-openid-op examples
2. go to http://www.openid-rp.com:8080/security-openid-rp/Index.jsf
3. select Custom and put
http://www.openid-op.com:8080/security-openid-op/openid/OP/XrdsService to the Custom
OpenID URL
4. write "user" as a username (or whatever), click login
5. write "user(a)example.com" as an email (or whatever), click OK
6. notice the error "HTTP Status 400 - 0x100: Namespace declaration for extension
http://openid.net/srv/ax/1.0 MUST be signed"
was:
0. Fix SEAMSECURITY-44 in openid-op by renaming
org.jboss.seam.security.examples.openid.Identity to @Named("oidentity"), replace
"identity" with "oidentity" in all openid-op/src/main/webapp/*.xhtml
1. deploy the security-openid-rp and security-openid-op examples
2. go to http://www.openid-rp.com:8080/security-openid-rp/Index.jsf
3. select Custom and put
http://www.openid-op.com:8080/security-openid-op/openid/OP/XrdsService to the Custom
OpenID URL
4. write "user" as a username (or whatever), click login
5. write "user(a)example.com" as an email (or whatever), click OK
6. notice the error "HTTP Status 400 - 0x100: Namespace declaration for extension
http://openid.net/srv/ax/1.0 MUST be signed"
security-openid-rp/op examples fail with 0x100: Namespace declaration
for extension http://openid.net/srv/ax/1.0 MUST be signed
-------------------------------------------------------------------------------------------------------------------------------
Key: SEAMSECURITY-67
URL: https://issues.jboss.org/browse/SEAMSECURITY-67
Project: Seam Security
Issue Type: Bug
Environment: JBossAS 6.1.0-SNAPSHOT+Weld 1.1.1, Seam Security 3.0.1-SNAPSHOT
Reporter: Marek Schmidt
Assignee: Shane Bryzak
Fix For: Future
Since the upgrade of OpenID4Java to 0.9.6 the openid example combo
(security-openid-rp/op) fails with
HTTP Status 400 - 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0
MUST be signed
The example seems to work fine if downgraded to 0.9.5
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:49 p.m.
New subject: [JBoss JIRA] (SEAMSECURITY-67) security-openid-rp/op examples fail with 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0 MUST be signed
[
https://issues.jboss.org/browse/SEAMSECURITY-67?page=com.atlassian.jira.p...
]
Marek Schmidt resolved SEAMSECURITY-67.
---------------------------------------
Fix Version/s: 3.1.0.Beta5
(was: Future)
Resolution: Out of Date
This seems to work now in 3.1.0.Beta5, probably for some time now...
tested with a modified CustomOpenIdProvider that asks for additional attributes, as the
CustomOpenIdProvider doesn't ask for email anymore)
security-openid-rp/op examples fail with 0x100: Namespace declaration
for extension http://openid.net/srv/ax/1.0 MUST be signed
-------------------------------------------------------------------------------------------------------------------------------
Key: SEAMSECURITY-67
URL: https://issues.jboss.org/browse/SEAMSECURITY-67
Project: Seam Security
Issue Type: Bug
Environment: JBossAS 6.1.0-SNAPSHOT+Weld 1.1.1, Seam Security 3.0.1-SNAPSHOT
Reporter: Marek Schmidt
Assignee: Shane Bryzak
Fix For: 3.1.0.Beta5
Since the upgrade of OpenID4Java to 0.9.6 the openid example combo
(security-openid-rp/op) fails with
HTTP Status 400 - 0x100: Namespace declaration for extension http://openid.net/srv/ax/1.0
MUST be signed
The example seems to work fine if downgraded to 0.9.5
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4592
days inactive
4779
days old
3 comments
2 participants
participants (2)
-
Marek Schmidt (JIRA) -
Marek Schmidt (Resolved) (JIRA)