cakebaker / openid-component Goto Github PK

Hi, I kept randomly getting invalid signature errors only to come back the next day (with no code changed) and the library to be working. I was really confused about this, but I think the Janrain readme offers some insight. Perhaps you should (can?)

define('Auth_OpenID_BUGGY_GMP', true);"

From the PHP Janrain readme:

"* In some cases, bugs in the GMP math library will result in signature
validation errors when using this library. Since GMP is preferred
over bcmath (for performance), you will have to define
Auth_OpenID_BUGGY_GMP in your application before importing any of
the library code:

define('Auth_OpenID_BUGGY_GMP', true);"

The Openid->isOpenIDResponse() checks if the openid_identity parameter has been set.
However, this parameter is not part of the OpenID cancel mesage.

Maybe a better solution would be to check for the openid_mode parameter which is always mandatory.