[seam-issues] [JBoss JIRA] Created: (JBSEAM-4515) Bundled openid4java.jar cannot authenticate against Google as an OpenID provider

Emmanuel Rousselle (JIRA) jira-events at lists.jboss.org
Tue Dec 29 15:31:30 EST 2009


Bundled openid4java.jar cannot authenticate against Google as an OpenID provider
--------------------------------------------------------------------------------

                 Key: JBSEAM-4515
                 URL: https://jira.jboss.org/jira/browse/JBSEAM-4515
             Project: Seam
          Issue Type: Bug
          Components: Security
    Affects Versions: 2.2.0.GA
         Environment: Mac OS X 10.6.2, JBoss AS 4.2.3.GA
            Reporter: Emmanuel Rousselle


The bundled openid4java.jar (version: 0.9.4.339) has a bug when authenticating against Google as an OpenID provider. The authentication will fail with the following error message in the Seam logs:

{code}
14:52:21,877 INFO  [Discovery] Starting discovery on URL identifier: https://www.google.com/accounts/o8/id?id=<information removed>
14:52:22,152 WARN  [Discovery] Yadis discovery failed on https://www.google.com/accounts/o8/id?id=<information removed> : 1806: XRDS stream exceeds max allowed size: 100000
14:52:22,152 INFO  [Discovery] No OpenID service endpoints discovered through Yadis; attempting HTML discovery...
{code}

Upgrading to openid4java.jar version 0.9.5.593 fixes the issue. The Seam distribution should be upgraded with openid4java.jar version 0.9.5.593 or later.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the seam-issues mailing list